Not configured: Windows Hello for Business does not create or store a PIN recovery secret. Not configured: Windows Hello for Business enrolls a key that is used for on-premises authentication.Įnabled: Windows Hello for Business enrolls a sign-in certificate using ADFS that is used for on-premises authentication.ĭisabled: Windows Hello for Business enrolls a key that is used for on-premises authentication. Use certificate for on-premises authentication This feature will provision Windows Hello for Business using TPM 1.2 unless the option to exclude them is explicitly set.ĭisabled: Windows Hello for Business will be provisioned using TPM if available, and will be provisioned using software if TPM is not available. Not configured: Windows Hello for Business will be provisioned using TPM if available, and will be provisioned using software if TPM is not available.Įnabled: Windows Hello for Business will only be provisioned using TPM. Not configured: Device does not provision Windows Hello for Business for any user.Įnabled: Device provisions Windows Hello for Business using keys or certificates for all users.ĭisabled: Device does not provision Windows Hello for Business for any user. Starting with Windows 10, version 1709, the location of the PIN complexity section of the Group Policy is: Computer Configuration > Administrative Templates > System > PIN Complexity.

Windows hello devices