You are viewing an old version of this page. View the current version.

Compare with Current View Page History

« Previous Version 4 Next »

Requirements

  • Windows Hello for Business has been deployed in the infrastructure.
  • The Enrolling WHfB in self-service option is enabled in the Common features section of the Indeed CM Setup Wizard.
  • The card type has been added to the system configuration Whfb.xml.
  • The user's workstation is equipped with the Trusted Platform Module 2.0.
  • The IndeedCM.WHfB.Middleware component is installed on the workstation.

When issuing the smart card in Self-Service, the user will be suggested to Enroll WHfB or select a connected hardware smart card.

  • Card initialization is not supported

After clicking the Issue button, Indeed CM will open the PIN Settings window for Windows Hello:

Click Set up PIN, enter the credentials for basic and user authentication (using the Indeed CM MFA adapter), and click Submit.

Set a PIN and click OK.

После успешного создания PIN-кода Indeed CM продолжит выпуск карты:

  • Запросит сертификаты по шаблонам добавленным в политику использования устройств

  • Запишет их на устройство
  • Закрепит устройство за пользователем

WHfB может использоваться как и аппаратные устройства на рабочей станции пользователя. Например, для аутентификации в домене.


  • No labels