# Platform authentication on the HES server

{% hint style="info" %}
Platform authentication allows you to use your device's built-in biometric sensors or PIN codes as FIDO keys for secure logins. This method works with **Windows 10-11**, **Apple iPhone**, and **Android** devices.
{% endhint %}

***

## **Adding a key** <a href="#xtzmwnqk7bzn" id="xtzmwnqk7bzn"></a>

### Windows 10-11

1. **Enable Windows Hello Fingerprint** or **PIN** sign-in on your device.

<img src="/files/xPzphOBdOsC2FhJ4qUlC" alt="" width="563">

2. When adding a FIDO key for server authentication, use the **fingerprint sensor** or log in via **PIN**.

<img src="/files/o1mtIJQ0fYHyLXxy7vvV" alt="" width="375">

3. In the upper right corner of the window, click the **profile icon**, select **Profile** from the drop-down list, and go to **FIDO2 Authenticators**.

<figure><img src="/files/gYrsajJVZle1LzM7JlVT" alt="" width="563"><figcaption></figcaption></figure>

4. Choose **Platform**, optionally check **Use Usernameless**, click **Next**, enter your **PIN**, set an authentication name, and click **Done**.

<div><figure><img src="/files/ul8jZYud14h0lEijYjEx" alt=""><figcaption></figcaption></figure> <figure><img src="/files/NYZbRtcrn8FhNUfoLJ0R" alt=""><figcaption></figcaption></figure> <figure><img src="/files/Eecy1BV2Jj6I7qA6nhlB" alt=""><figcaption></figcaption></figure> <figure><img src="/files/mBdyZTnC0NxG88rPOnOE" alt=""><figcaption></figcaption></figure></div>

### Apple iPhone

1. Set up **Touch ID** on your iPhone.
2. When adding a FIDO key, scan your **fingerprint** using the sensor.&#x20;
3. Name the key and touch **Done**.

***

### **Android**

1. Enable **fingerprint** or **PIN unlock** on your Android device.
2. When adding a FIDO key, scan your **fingerprint** or log in via **PIN**. Touch **Get Started**, then select **Use this device with screen lock**.
   * If using **fingerprint unlock**, scan your fingerprint.
   * If using **PIN unlock**, touch **Use screen lock** and enter your PIN.
3. Name the key and touch **Done**.

***

## &#x20;**Authorization via the platform key** <a href="#shag-2-avtorizaciya-s-pomoshyu-fido-klyucha" id="shag-2-avtorizaciya-s-pomoshyu-fido-klyucha"></a>

### Windows 10

1. Select the **Sign in with a Security Key** option.
2. Choose your user in the next window and click **OK**.
3. **Scan your fingerprint** using the sensor, or log in via **PIN**.

<div><figure><img src="/files/wPA2Os4zYf279aSsQUJx" alt=""><figcaption></figcaption></figure> <figure><img src="/files/SB4W2DgNiREmOrLA3NWN" alt=""><figcaption></figcaption></figure> <figure><img src="/files/8TKP7ku9FTt7Z19GrgGG" alt=""><figcaption></figcaption></figure></div>

### **Apple iPhone**

1. Select the **Sign in with a Security Key** option.
2. **Scan your fingerprint** using the sensor.

<div><figure><img src="/files/YPUMz9SmqSJ9LOKuPSx3" alt="" width="272"><figcaption></figcaption></figure> <figure><img src="/files/QMhENVgbB0Md7QrOSYhY" alt="" width="238"><figcaption></figcaption></figure></div>

***

### **Android**

{% hint style="info" %}
**Note**: Android does not support usernameless FIDO authentication.
{% endhint %}

1. Enter your login and touch **Next**.
2. Select **Sign in with a Security Key**.

<div><figure><img src="/files/y47RGE3bTx2vLeRBM9PC" alt="" width="265"><figcaption></figcaption></figure> <figure><img src="/files/s5pVfsaNEXGNcDjePpXh" alt="" width="264"><figcaption></figcaption></figure></div>

1. **Scan your fingerprint** using the sensor, or log in via **PIN**:
   * If using **fingerprint unlock**, scan your fingerprint.
   * If using **PIN unlock**, touch **Use screen lock** and enter your PIN.

<div><figure><img src="/files/CGHEYKBcyX1mDd7PKyAB" alt="" width="188"><figcaption></figcaption></figure> <figure><img src="/files/sjgYS0xw7OwkHKE0Ek8v" alt="" width="188"><figcaption></figcaption></figure></div>

***

### **Using the Platform Key as a Second Factor**

You can also use a platform key for two-factor authentication. To do this, set up your platform key as described above. Then, at the login screen, input your **login** and **password**, and choose **Security Key** from the list of two-factor authentication methods.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://enterprise.hideez.com/hideez-enterprise-server/administration/platform-authentication-on-the-hes-server.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.