Setting up PIN and Biometrix Recognition for Fingerprint or Face

William Gordon Updated by William Gordon

When Windows Hello for Business is first applied it will prompt you to go through the Enrollment Experience when you next login. Please watch the 1-minute video below for a brief demonstration of this process before proceeding.

The Enrollment Experience will walk you through setting up a PIN as required with at least 6 digits on the device/workstation you are signing in to.

It is important to remember that this PIN is different from your password and is unique to the device it is setup on. In the event that you forget the PIN then you can use your password to sign in to the device/workstation just like before by selecting Sign-in options and then the key icon.

In addition to a PIN, the Enrollment Experience will also allow you to setup Biometrix for eligible devices. As such it will prompt you to setup your Fingerprint Reader if the connected device is eligible and/or Facial Recognition if you have an eligible Webcam connected.

For additional information on our Company Policies please read the article below:

ISMS-POL-05 - Password Management Policy

The process below details the specific steps you may see as detailed in the Enrollment Experience, but some steps may not show for everyone.

  1. Setting up Facial Recognition on an Eligible Device by selecting "Yes, set up" as seen below
You may also have an option for setting up your Fingerprint at this time.
If you don't see the option for Facial Recognition or Fingerprint Biometrix then it is likely that you don't have an eligible device for these additional features and will only get the PIN option seen later in this guide.
  1. Facial Recognition will then use an eligible webcam to scan your face. Simply position your face in the middle of the screen to proceed.
  1. Facial Recognition will complete when it says, "That's it, you're all set!" as seen below. Select Next to proceed to setting up your required PIN.
  1. Select Next to begin setting up your PIN for this specific device/workstation. The PIN has to be a minimum of 6 digits and will NOT sync between devices.
  1. Set your 6+ digit PIN on this screen and select "OK" to proceed.
  1. The final screen will now let you know you are "All set!" and the Windows Hello for Business settings are complete.

Each method setup here can be changed on the login screen by selecting Sign-in options and then selecting the icon for the alternative sign-in option

The process below details the specific steps needed to change the sign-in option at the login screen. This is only applicable after you have completed the Enrollment Experience.

  1. On the login screen select Sign-in options to change the sign-in method
  1. Hover over the icon to see the option and select the desired sign-in method. For example, select the Key icon to change back to your traditional password sign-in method.

FAQs

Q: What if I haven't been prompted to set this up?
A: It is normal for this to take a few days to be prompted. If you haven't received the expected prompt within a week then please reach out to the Service Desk for assistance.
Q: What if I was out when this was rolled out?
A: The prompt should still pop up within a few days from your initial sign-in after returning.
Q: How do I know if I have an eligible fingerprint reader?
A: Typically, this will be a built into your laptop just below the keyboard.
Some devices in rarer cases may even have it on the side of the laptop.
Q: How do I know if I have an eligible Webcam for Facial Recognition?
A: Typically, this is only eligible for Internal webcams. Some external webcams can be eligible but usually have a high resolution like 4K or will say Windows Hello compatible on the packaging.
This can be more troublesome for external webcams as some may say they are compatible on the packaging but don't meet current requirements by Microsoft to be compatible anymore.
Q: How do I switch back to my password or another Sign-in option?
A: Select Sign-in options below the login screen and hover over the icon for each to find the needed Sign-in option. For example, the key icon will switch back to your traditional password method.
Q: What if I received an error when trying to set my PIN?
A: This can occur for various reasons and usually will be resolved by a reboot and signing back in again. Please do make note of the error code/message and reach out to the Service Desk if this persists.
The Service Desk will use the error code to reference against common PIN errors.
Q: How I update these options after I completed the Enrollment Experience?
A: After the options expire it will prompt you to update them or alternatively you can change them from your System Settings under Accounts > Sign-in options > Ways to sign in
Q: What if I receive an error for "Something went wrong and your PIN isn't available" after?
A: This is normal when you complete the Enrollment Experience, but it hasn't fully synced yet. Please continue to use your password as normal and ensure you are connected to Avita as you normally would such as with your VPN if applicable. If the issue persists then please reach out to the Service Desk for assistance.
Q: What if I know my PIN and it is telling me the PIN is incorrect?
A: In this case we may need to clear the setup, and the Service Desk can assist with this if you need assistance. We will walk you through opening Command Prompt and running this command below to clear the setup before rebooting:

certutil.exe -deleteHelloContainer
Q: What if my problem isn't listed above?
A: Please try to reboot first and if the issue persists contact the Service Desk for assistance. Most issues related to this process will clear up from a reboot or within a short period of time after everything has had time to fully sync in the background.

How did we do?

Sending Email from Shared Mailbox

Setup 1Password with Microsoft Entra

Contact