Windows 10 Preparation - University IT-Service (previously Computing Centre)

Attention:

If a computer is used by several people, it is required that each user has their own local user account.

It is not possible to set up an MFA login with a technical account.

The first step is to check the required security level of the device. Go to the Settings of your device and open the Update and security option. You will also find the device security under Windows security.Information on the TPM (Trusted Platform Module) should be included in Specification version 2.0. This version is mandatory in order to set up the MFA with passkey under Windows.Otherwise, please follow theMFA KeePassXC instructions to use KeePassXC as an alternative application.

Screenshot 1: Windows-Security processor details Specification recheck

The second step is to activate the MFA login options on your laptop. To do this, go back to your device's Settings. There, you will find the Accounts menu item — access your work or school account. Disconnect the Microsoft user account as shown on the screen.

[Translate to English:] Abbildung 2: Trennung vom Microsoft-Konto in den Kontoeinstellungen — [Translate to English:] Abbildung 2: Trennung vom Microsoft-Konto in den Einstellungen

Notice!

If you have already set up the Windows Hello pin or fingerprint on your computer, you can continue with Roll out Passkey.

To do this, please go back to your device's Settings. There, after selecting Accounts, you will find the Sign-in options. First, activate the Windows Hello PIN in the login options. Restart the laptop after setting up to try the new login option.

Screenshot 3: Windows Hello Pin Option set up — Screenshot 3: Windows Hello Pin Option

Notice:

The Windows Hello PIN should not contain any content from your password for the BA number or from your BA number.
The Windows Hello PIN must be set up, without it the Passkey setup cannot be completed. It also provides as an alternative login method if fingerprint recognition does not work.

Notice for tower computers!

If you are using a desktop or tower computer, you can only set up Windows Hello PIN as a login option. You can continue directly with Roll out Passkey.

Attention!

If you have forgotten the Windows Hello Pin, you must first remove it. And set everything up again as described in the instructions in the section Setting up Windows Hello.

Now select a sign-in option (Hello fingerprint recognition is recommended) to add them and click Set up.

Once set up, restart the computer to check the new login option.