Windows Hello for Business (WHfB)

Windows Hello for Business (WHfB) Windows enables employees of the University of Passau to securely log in to Windows devices without a password using biometric recognition (e.g. fingerprint or face) or PIN with multi-factor authentication strength.

Windows Hello for Business can only be set up on personal work devices managed by the university and is therefore not available to students.

If you wish to set up this MFA method, you must already have an existing, working MFA method (e.g., Microsoft Authenticator-App, TOTP-App or SMS-Verfahren) during the setup process. Otherwise, it is not possible to register this method correctly.

The available login methods depend on your device's hardware:

PIN: It is always available and needs to be set up.
Fingerprint: available on most office notebooks with built-in fingerprint scanner, rarely on desktop PCs.
Facial recognition: requires a special, compatible camera, but is usable on most work laptops.

Even after setting up Windows Hello, you can still log in with your Windows password. All configured login options can be used simultaneously and are available every time you log in.

You must have another multi-factor authentication method set up before configuring WHfB, as Windows Hello for Business requires identity verification via MFA. You can use the Microsoft Authenticator app or any TOTP-enabled application for this.

Please note:

Windows Hello can only be set up on your personal Windows device.
Windows Hello for Business is not supported in Citrix environments.
The login method via Windows Hello, once set up, is device-specific and cannot be transferred to other devices.
If you use multiple personal Windows devices, you must configure Windows Hello on each device individually.

Setting up WhfB

1. Open login options

You can access the sign-in options by searching for "Sign-in options".

Alternatively, go to: "Windows"→ "Einstellungen" → "Konten" → "Anmeldeoptionen"."

2. Set up a Windows Hello PIN

Click on "PIN (Windows Hello)" then "Einrichten".

3. Windows Hello for Business setup window

Click "OK" to enable PIN login.

4. Set a PIN

Enter a new Windows Hello PIN and confirm it. Your PIN must be at least 6 characters long. Optionally, enable "Include letters and symbols".

5. Done - Use PIN for login

After successfully setting your PIN, you can use it to log in to your work device. Click "OK" to exit the setup wizard.

1. Set up fingerprint recognition

Under "Accounts" → "Sign-in options," select Fingerprint recognition (Windows Hello) and click "Set up." Follow the instructions to register your fingerprint and use it for sign-in.

2. Start Windows Hello Setup

In the welcome window, click "Get started" to begin setting up Windows Hello.

3. Register your fingerprint

Place your finger on the sensor several times and lift it again until the setup is complete.

Note: On most Lenovo notebooks, the fingerprint sensor is located to the right below the keyboard, next to the touchpad. On newer models, the sensor is often integrated into the power button.

4. Place your finger on the sensor several times.

Touch the fingerprint sensor again until all areas of your fingerprint are captured. Position your finger slightly differently with each scan to ensure the device can fully register the print.

5. Set up a PIN as a fallback

Create a Windows Hello PIN in case fingerprint recognition is unavailable.

If you have already set up a Windows Hello PIN, the following PIN setup steps are skipped. The existing PIN will be used automatically as a fallback. You can now decide whether to add more fingers to register multiple fingerprints or exit the setup wizard.

6. Windows Hello for Business setup window

Confirm with "OK".

7. Set a PIN

Enter a new Windows Hello PIN and confirm it in the second field. Optionally, you can enable the "Include letters and symbols" option. Confirm your entry by clicking "OK".

8. Setup complete

Windows Hello setup is now complete. You can now log in with your PIN and also with your fingerprint.

Confirm with "OK".

1. Open sign-in options

You can access the sign-in options by searching for "Sign-in options".

Or via: "Windows" → "Settings" → "Accounts" → "Sign-in options".

2. Set up facial recognition

Click on "Facial recognition (Windows Hello)" then "Set up".

3. Start Windows Hello Setup

In the welcome window, click "Get started" to begin setting up Windows Hello.

4. Setting up facial recognition

Look directly into the camera during facial recognition until your face is fully captured.

On Lenovo ThinkPads and most notebooks, the camera is integrated into the top of the display frame.

5. Set up a PIN as a fallback for facial recognition

Create a Windows Hello PIN in case facial recognition is unavailable.

If you have already set up a PIN, the following steps are unnecessary. If you wore glasses during setup, you can now select the "Improve recognition" option after completion. This will allow you to register your face without glasses.

6. Windows Hello for Business setup window

Confirm with "OK".

7. Set a PIN

Enter a new Windows Hello PIN and confirm it in the second field. Optionally, you can enable the "Include letters and symbols" option.

Confirm your entry by clicking "OK".

If you have already set up a PIN, it will continue to be used and does not need to be created again here.

8. Setup complete

Windows Hello setup is now complete. You can now log in with your PIN and also with facial recognition.

Confirm with "OK".

Log in with WHfB

On your personal notebook's login screen, you can select your preferred login method under "Login options"—for example, PIN, fingerprint, or facial recognition.

If Windows Hello is not available, you can still log in with your Windows password.

1. Select login options

On the login screen, click "Login options" to choose from the available methods.

Select the PIN icon (keypad icon).

2. Enter PIN

Enter your Windows Hello PIN and press "Enter" to confirm.

3. Successful Registration

If registration was successful, a smiley face with "Hello!" will appear on the screen, followed by the message "Welcome".

You will be automatically logged in without any further input.

1. Select login options

On the login screen, click "Login options" to choose from the available methods.

Select the fingerprint icon.

2. Register your fingerprint

You will see the fingerprint icon on the login screen.

Place your registered finger on the fingerprint sensor to log in.

3. Successful Registration

If registration was successful, a smiley face with "Hello!" will appear on the screen, followed by the message "Welcome".

You will be automatically logged in without any further input.

1. Select login options

On the login screen, click "Login options" to choose from the available methods.

Select the facial recognition icon (smiley face icon).

2. Perform facial recognition

The camera will activate on the login screen.

Look directly into the center of the camera so your face can be recognized.

3. Successful Registration

If registration was successful, a smiley face with "Hello!" will appear on the screen, followed by the message "Welcome".

You will be automatically logged in without any further input.