Table of Contents
Windows Hello for Business: Setup PIN and Biometric Options
Windows Hello for Business: Setup PIN and Biometric Options
Windows Hello for Business is being enabled to give you a more secure and easier way to sign in to your computer. Instead of relying only on passwords, you’ll be able to sign in using a PIN and—on eligible devices—biometric options like fingerprint or facial recognition. These methods are faster, reduce the risk of phishing or password theft, and help better protect both your account and company data.
Please watch the 1‑minute video below for a quick walkthrough of what the setup process looks like before you continue.
Your PIN is different from your password and is unique to each device.
If you have more than one device, each device will have a different pin.
If you ever forget your PIN, you can still sign in using your password via Sign‑in options.
If you have more than one device, each device will have a different pin.
If you ever forget your PIN, you can still sign in using your password via Sign‑in options.
Only built‑in fingerprint readers and built‑in webcams are supported at this time. External fingerprint readers and webcams are not currently eligible. When external devices become supported, we’ll reach back out with an update.
For additional information on our Company Policies, please read the article at:
ISMS-POL-05 - Password Management Policy
ISMS-POL-05 - Password Management Policy
Initial Setup of Windows Hello PIN or Biometrics
- Setting up Facial Recognition on an Eligible Device by selecting "Yes, set up" as seen below
You may also have an option for setting up your Fingerprint at this time.
If you don't see the option for Facial Recognition or Fingerprint Biometric, then it is likely you don't have an eligible device for these additional features and will only get the PIN option, as seen later in this guide.
If you don't see the option for Facial Recognition or Fingerprint Biometric, then it is likely you don't have an eligible device for these additional features and will only get the PIN option, as seen later in this guide.
- If you have a newer-model laptop, then you will likely have a fingerprint reader built into your power button at the top right-hand corner. You just need to gently rest your finger on top of the button to use the fingerprint reader, as shown with that backlight on the button. Please see the image below as a reference.
- Facial Recognition will then use an eligible webcam to scan your face. Simply position your face in the middle of the screen to proceed.
- Facial Recognition will complete when it says, "That's it, you're all set!" as seen below. Select Next to proceed to setting up your required PIN.
- Select Next to begin setting up your PIN for this specific device/workstation. The PIN has to be a minimum of 6 digits and will NOT sync between devices.
- Set your 6+ digit PIN on this screen and select "OK" to proceed.
- The final screen will now let you know you are "All set!" and the Windows Hello for Business settings are complete.
Each method setup here can be changed on the login screen by selecting the Sign-in options and then selecti the icon for the alternative sign-in option
The process below outlines the steps needed to change the sign-in option at the login screen. This is only applicable after you have completed the Enrollment Experience.
Alternate Sign-In Methods for Windows Hello
- On the login screen, select Sign-in options to change the sign-in method
- Hover over the icon to see the option and select the desired sign-in method. For example, select the Key icon to change back to your traditional password sign-in method.
Troubleshooting Steps
Error "credentials could not be verified".
Important: Before setting up your Windows Hello PIN or Biometrics, please ensure you are connected to the VPN.
If you see the error for "credentials could not be verified" then follow these steps detailed below.
If you see the error for "credentials could not be verified" then follow these steps detailed below.
- Select the key icon under Sign‑in options to sign in using your password
- Launch FortiClient from the Start menu
- Once signed in, connect to the VPN manually
- Lock your computer, then unlock it again to test your PIN or biometric sign‑in
Error for "This page isn't working right now" accessing SSRS Reporting
Important: SSRS Reporting does not currently support Windows Hello PIN or Biometrics; please use your password to sign in.
If you see the error "This page isn't working right now," then follow the steps detailed below.
If you see the error "This page isn't working right now," then follow the steps detailed below.
- If you are accessing reports via SSRS then the URL will look like https://reports.avitarx.com/ as seen below
- Select the Refresh under the Error message to be prompted again
- Select the More choices option under PIN option
- Select the User a different account from More choices to sign in using your password
- Enter your User name and Password to sign in
FAQs
Q: What if I haven't been prompted to set this up?
A: It is normal for this to take a few days to be prompted. If you haven't received the expected prompt within a week then please reach out to the Service Desk for assistance.
Q: What if I was out when this was rolled out?
A: The prompt should still pop up within a few days from your initial sign-in after returning.
Q: How do I know if I have an eligible fingerprint reader?
A: Our newer model laptops will have this built into the power button at the top right corner as seen in the image under step 1 above.
Traditionally, this will be a built into your laptop just below the keyboard.
Some devices in even rarer cases may even have it on the side of the laptop.
Traditionally, this will be a built into your laptop just below the keyboard.
Some devices in even rarer cases may even have it on the side of the laptop.
Q: How do I know if I have an eligible Webcam for Facial Recognition?
A: Typically, this is only eligible for Internal webcams. But when external webcams become supported again then we will reach out to those that requested one via the survey.
Q: How do I switch back to my password or another Sign-in option?
A: Select Sign-in options below the login screen and hover over the icon for each to find the needed Sign-in option. For example, the key icon will switch back to your traditional password method.
Q: What if I received an error when trying to set my PIN?
A: This can occur for various reasons and usually will be resolved by a reboot and signing back in again. Please do make note of the error code/message and reach out to the Service Desk if this persists.
The Service Desk will use the error code to reference against common PIN errors.
The Service Desk will use the error code to reference against common PIN errors.
Q: How I update these options after I completed the Enrollment Experience?
A: After the options expire it will prompt you to update them or alternatively you can change them from your System Settings under Accounts > Sign-in options > Ways to sign in
Q: What if I receive an error for "Something went wrong and your PIN isn't available" after?
A: This is normal when you complete the Enrollment Experience, but it hasn't fully synced yet. Please continue to use your password as normal and ensure you are connected to Avita as you normally would such as with your VPN if applicable. If the issue persists then please reach out to the Service Desk for assistance.
Q: What if I know my PIN and it is telling me the PIN is incorrect?
A: In this case we may need to clear the setup, and the Service Desk can assist with this if you need assistance. We will walk you through opening Command Prompt and running this command below to clear the setup before rebooting:
certutil.exe -deleteHelloContainer
certutil.exe -deleteHelloContainer
Q: What if my problem isn't listed above?
A: Please try to reboot first and if the issue persists contact the Service Desk for assistance. Most issues related to this process will clear up from a reboot or within a short period of time after everything has had time to fully sync in the background.
