While I have an initial round of keys I’m reviewing, I hope to continue adding additional keys over time I’ll update this post accordingly when the list grows. I’ll be looking at their usability within the enterprise with Azure AD. While there are a series of articles out there about security keys, most of them focus on the consumer side and the range of features they support – some keys support FIDO U2F, FIDO2, smartcard, OTP, and so on. So here I am, with a smattering of FIDO2 security keys (referred to further within just as security keys or simply keys). The private key still never leaves the FIDO2 security key, but you have the convenience of using the same set of credentials on whatever device you connect it to. But unlike WHfB, where the key-pair is bound to the TPM, FIDO2 security keys allow for secure portability of those credentials. As with Windows Hello for Business (WHfB), they provide the power of asymmetric key-pair based authentication. The work for the site that will replace this post is making good progress, and I hope to be reviewing new keys again in February 2023.įIDO2 security keys are increasingly becoming the “modern smartcard” for organizations that are looking to go passwordless within the Microsoft ecosystem of cloud and hybrid identity. After moving hosting providers, I’ve noticed a few oddities with how this content transferred over, but those should be resolved.

Windows hello for business fido2