1. Home
  2. Knowledge Base
  3. SureMDM
  4. Windows Management
  5. How to Configure Windows Hello (Windows)

How to Configure Windows Hello (Windows)

Windows Hello is a more secure way to get instant access to Windows 10 devices using biometric gestures (fingerprint or facial recognition) or PIN gestures. This profile allows admins to configure fingerprint or facial recognition or set a PIN on the enrolled devices that help the users get access to applications, websites, and networks.


The purpose of this knowledge base article is to provide a detailed guide on how to configure Windows Hello on a Windows device. Windows Hello is a built-in biometric authentication feature that allows users to log in to their Windows devices using facial recognition, fingerprint scanning, or a PIN.


  • The device must be enrolled through Windows EMM or Dual Enrollment mode.
  • The device must be Azure AD joined to leverage all features of this policy.
  • This article is intended for users who have a Windows device running Windows 10 or later with compatible hardware (such as a camera or fingerprint scanner).
  • Please refer here for different types of Windows enrollment.


To configure fingerprint or facial recognition or set a PIN on the enrolled device(s), follow these steps:

  1. Login to the SureMDM Console.
  2. Navigate to Profiles and select the Windows platform.
  3. Click Add and enter the Profile name.
  4. Select the Windows Hello option and click Configure.
Windows HelloAllow the use of Windows Hello for business.
Use BiometricsAllow the use of biometric gestures such as fingerprint or face recognition instead of PIN gesture.
TPMEnable this option to disable TPM (Trusted Protection Module revision 1.2) from using Windows Hello profile.
Minimum Pin LengthEnter the minimum number of digits for setting a PIN.
Maximum Pin LengthEnter the maximum number of digits for setting a PIN.
DigitsSet the usage of digits (Allowed/Required/Not Allowed).
Upper Case LettersConfigure the use of upper case letters (Allowed/Required/Not Allowed).
Lower Case LetterConfigure the use of lower case letters (Allowed/Required/Not Allowed).
Special CharactersConfigure the use of special characters (Allowed/Required/Not Allowed).
Use Security Key For Sign InUse this option for the users to sign-in to their device with FIDO security key.
  1. Click Save to save the profile. The newly created profile will be listed under the Profiles section.
  2. Go to the Home tab and select the Windows device(s) or group(s).
  3. Click Apply to launch the Apply Job/Profile To Device prompt.
  4. In the Apply Job/Profile To Device prompt, select the created profile and click Apply.

By following the step-by-step instructions provided in this article, users can successfully configure Windows Hello on their Windows devices. Windows Hello provides a convenient and secure authentication method, enhancing the overall user experience and security of Windows logins.

End User Experience:

Need help? CONTACT US 

Was this helpful?
Updated on March 2024