1. Prepare Windows SMD device (instruction)

Starting point:

• You have not yet prepared your device for 2-factor authentication (2FA). (If you have: Go to the registration instructions).
• You are using a PC or laptop with Windows 10 operating system or higher.
• You are using a so-called "Self Managed Device" (SMD), i.e. you usually have admin rights for the device. (Are you using a third-party managed device (FMD)? Then switch to this instruction for FMD devices).

With "Windows Hello", Microsoft provides you with a convenient way to log in to your Windows device with a PIN or biometric data.

If you want to use Windows Hello in combination with a fingerprint or facial recognition, you need a device that can read this data. If this is not the case, you can use the security option of the Windows Hello PIN.

Unlike a password, the PIN (or fingerprint or facial recognition) is bound to the device on which it was set up. This means that you cannot use it outside the device (e.g. PC or laptop).

You set up Windows Hello by opening the login options. You can find them, for example, by clicking on the Windows Start icon at the bottom left and then selecting "Settings" (the gearwheel; 2) in the menu.

On the interface that appears, select the "Accounts" option.

In the Accounts section, then select the " Sign-in options" entry.

Then click on the "Windows Hello PIN" option.

Click on "Add".

The window that opens may first require confirmation of your local device account for security reasons. In this case, first enter the corresponding password.

Then assign a PIN of your choice. Choose a combination that is easy to remember, but not too simple. If it helps you, you can also use letters or symbols in addition to numbers. To do this, also click the "Include letters and symbols" checkbox below the input field.

Confirm the entry with "Ok" - your PIN is now set up. Done!

After setting up the Hello Pin, you can also log in to your computer with the Hello PIN. The next time you log in, you will be asked for the PIN instead of the usual password. However, the previous login options on the computer remain unchanged.

Alternatives

If your device supports it, you can now also activate fingerprint or face recognition to use it instead of the PIN.

If you want to change your initially selected PIN, you can do so by pressing the "Change" button and assigning a new PIN according to the system instructions.

If you ever forget your Windows Hello PIN, you can also assign a new combination via "Forgot PIN". You will be asked for your local device password, so please keep this in mind!

Note: If you remove your Windows Hello PIN and have not stored any biometric data, the option of being able to use your terminal device as a second factor in UHH 2FA is not available! You will then have to switch to the 2FA code list or a device with QR code scanner.

If you like: how do you set up a Windows Hello fingerprint?

Requirement:

• The Windows Hello PIN has been set up.
• The device on which the fingerprint is to be stored has a fingerprint reader or illuminated infrared sensor

Procedure:

• Click the "Set up" button under "Windows Hello fingerprint".
• If you have already entered a PIN earlier, you will be asked to do so.
• Click on "Let's go" and follow the instructions.
• Click on "Close".
• To add more fingerprints, click Add more.

You can delete an already deposited fingerprint from your device again by clicking on the "Remove" button.

If you like: how do you set up Windows Hello facial recognition?

Requirement:

• The Windows Hello PIN is set up - it serves as a back-up in case facial recognition does not work one day.
• The device on which you want to set up facial recognition has a webcam including an infrared camera.

Procedure:

• To set up face recognition, click "Set up" under "Windows Hello Face" in the "Sign-in options" and follow the system instructions.
• Look neutrally and directly into the camera during the recognition process.
• Make sure that only your face is visible, as centered as possible. If the camera detects multiple faces, the setup will fail.
• If you are wearing glasses, run the recognition again via "Improve recognition" after the process. Do not wear glasses when doing this. This will allow you to authenticate to the system with and without glasses.
• When you have completed the setup, you can end the process by clicking "Close".

You can delete an already stored facial recognition from your device using the "Remove" button.

Congratulations!

You have successfully prepared your device for registration with the 2FA app of the University of Hamburg. You can now register your device as a second factor with the 2FA app of the University of Hamburg.