# Platform authentication on the HES server

{% hint style="info" %}
Platform authentication allows you to use your device's built-in biometric sensors or PIN codes as FIDO keys for secure logins. This method works with **Windows 10-11**, **Apple iPhone**, and **Android** devices.
{% endhint %}

***

## **Adding a key** <a href="#xtzmwnqk7bzn" id="xtzmwnqk7bzn"></a>

### Windows 10-11

1. **Enable Windows Hello Fingerprint** or **PIN** sign-in on your device.

![](https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/QZSnKdj0LzXS03BaDzR3/2)

2. When adding a FIDO key for server authentication, use the **fingerprint sensor** or log in via **PIN**.

![](https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/s2EvvEP6I0mGcPwTg5kp/0.png)

3. In the upper right corner of the window, click the **profile icon**, select **Profile** from the drop-down list, and go to **FIDO2 Authenticators**.

<figure><img src="https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/d57GFLMcMmr8kA6g7hNW/Screenshot_7.jpg" alt="" width="563"><figcaption></figcaption></figure>

4. Choose **Platform**, optionally check **Use Usernameless**, click **Next**, enter your **PIN**, set an authentication name, and click **Done**.

<div><figure><img src="https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/GE11ZwDRn9XrCFKDD7uK/Screenshot_13.jpg" alt=""><figcaption></figcaption></figure> <figure><img src="https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/cyDM8afkZj6TFOHfwvuq/Screenshot_10.jpg" alt=""><figcaption></figcaption></figure> <figure><img src="https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/Pl32jAqnd9zYb5wh5sel/Screenshot_11.jpg" alt=""><figcaption></figcaption></figure> <figure><img src="https://content.gitbook.com/content/RdTysrljwe610dPFG7tE/blobs/bAEf6DjSPjdrguR262iN/Screenshot_12.jpg" alt=""><figcaption></figcaption></figure></div>

### Apple iPhone

1. Set up **Touch ID** on your iPhone.
2. When adding a FIDO key, scan your **fingerprint** using the sensor.&#x20;
3. Name the key and touch **Done**.

***

### **Android**

1. Enable **fingerprint** or **PIN unlock** on your Android device.
2. When adding a FIDO key, scan your **fingerprint** or log in via **PIN**. Touch **Get Started**, then select **Use this device with screen lock**.
   * If using **fingerprint unlock**, scan your fingerprint.
   * If using **PIN unlock**, touch **Use screen lock** and enter your PIN.
3. Name the key and touch **Done**.

***

## &#x20;**Authorization via the platform key** <a href="#shag-2-avtorizaciya-s-pomoshyu-fido-klyucha" id="shag-2-avtorizaciya-s-pomoshyu-fido-klyucha"></a>

### Windows 10

1. Select the **Sign in with a Security Key** option.
2. Choose your user in the next window and click **OK**.
3. **Scan your fingerprint** using the sensor, or log in via **PIN**.

<div><figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2F4mfVdj1EJXWyaC5tcgCi%2Fimage%20(1).png?alt=media&#x26;token=5eea5562-2a46-46cb-8263-dcdb351b07c7" alt=""><figcaption></figcaption></figure> <figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2F4MmWzHOi7WyE5YlMcz5m%2Fimage.png?alt=media&#x26;token=ecf49fcc-3fda-4d5c-a880-f9b8a77c2991" alt=""><figcaption></figcaption></figure> <figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FfRBwmDzwcBKFHFLrOPfW%2F000.png?alt=media&#x26;token=ac90ceb0-f5fe-437e-b0fd-02bac8fb5c58" alt=""><figcaption></figcaption></figure></div>

### **Apple iPhone**

1. Select the **Sign in with a Security Key** option.
2. **Scan your fingerprint** using the sensor.

<div><figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2Fv6b3CpKO5nYHcxIjHHKe%2Fimage%20(1).png?alt=media&#x26;token=03bf0541-9dc2-433b-90e6-631ffda24e82" alt="" width="272"><figcaption></figcaption></figure> <figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FIQORsuwPoyoDGia49yK7%2FScreenshot_8.png?alt=media&#x26;token=ff87eed4-3bff-462d-bcf1-481034763216" alt="" width="238"><figcaption></figcaption></figure></div>

***

### **Android**

{% hint style="info" %}
**Note**: Android does not support usernameless FIDO authentication.
{% endhint %}

1. Enter your login and touch **Next**.
2. Select **Sign in with a Security Key**.

<div><figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FyqsDiarO5gFfjLwTMytJ%2FScreenshot_8z.png?alt=media&#x26;token=9670091b-fed1-48af-bdfb-b8dbba74b20e" alt="" width="265"><figcaption></figcaption></figure> <figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FwldzCT6d8xSNMPERqhu6%2FScreenshot_9.png?alt=media&#x26;token=a49a50ed-0fa9-4e5c-95bc-4d9292774500" alt="" width="264"><figcaption></figcaption></figure></div>

1. **Scan your fingerprint** using the sensor, or log in via **PIN**:
   * If using **fingerprint unlock**, scan your fingerprint.
   * If using **PIN unlock**, touch **Use screen lock** and enter your PIN.

<div><figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2FT7GwOJrdcKdcARO2QuhA%2Fimage%20(2).png?alt=media&#x26;token=cc0c0763-22bf-4cb4-aada-1b1412bad1e8" alt="" width="188"><figcaption></figcaption></figure> <figure><img src="https://1669663611-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FRdTysrljwe610dPFG7tE%2Fuploads%2F8EcUXX1i1YO0UtS8SV0N%2Fimage%20(3).png?alt=media&#x26;token=2a0f1627-3fd1-44d8-8307-6bbe3baa5d3f" alt="" width="188"><figcaption></figcaption></figure></div>

***

### **Using the Platform Key as a Second Factor**

You can also use a platform key for two-factor authentication. To do this, set up your platform key as described above. Then, at the login screen, input your **login** and **password**, and choose **Security Key** from the list of two-factor authentication methods.