Page History

Requirements

• Windows Hello for Business has been deployed in the infrastructure.
• The Enrolling WHfB in self-serviceWindows Hello for Business (WHfB) option is enabled in the Common features section section of the Indeed CM Setup Axidian CertiFlow Configuration Wizard.
• The card type has been added to the system configuration Whfb.xml.
• The user's workstation is equipped with the Trusted Platform Module 2.0.
• The IndeedCMThe AxidianCertiFlow.WHfB.Middleware component is installed on the workstation.

When issuing the smart card in Self-Service, the user will be suggested to Enroll WHfB or select a connected hardware smart card.

Image RemovedImage Added

After clicking the Issue button, Indeed CM will Axidian CertiFlow will open the PIN Settings window for Windows Hello:

Image RemovedImage Added

Click Set up PIN, enter the credentials for basic and user authentication (using the Indeed CM Axidian CertiFlow MFA adapter), and click Submit.

Image RemovedImage Added

Set up a PIN and click OK.

Image RemovedImage Removed

После успешного создания PIN-кода Indeed CM продолжит выпуск карты:

Image AddedImage Added

After successfully creating the PIN, Axidian CertiFlow will continue issuing the card:

• Certificates will be requested based on templates added to the smart card usage policy.

• They will be written down on the card.
• The card will be assigned to the user.

• Запросит сертификаты по шаблонам добавленным в политику использования устройств

• Запишет их на устройство
• Закрепит устройство за пользователем

The WHfB card can be used just like hardware smart cards on the user's workstation. For example, for authentication in a domain.

Image RemovedImage Added