> For the complete documentation index, see [llms.txt](https://enterprise.hideez.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://enterprise.hideez.com/hideez-enterprise-server/administration/platform-authentication-on-the-hes-server.md).

# Platform authentication on the HES server

{% hint style="info" %}
Platform authentication allows you to use your device's built-in biometric sensors or PIN codes as FIDO keys for secure logins. This method works with **Windows 10-11**, **Apple iPhone**, and **Android** devices.
{% endhint %}

***

## **Adding a key** <a href="#xtzmwnqk7bzn" id="xtzmwnqk7bzn"></a>

### Windows 10-11

1. **Enable Windows Hello Fingerprint** or **PIN** sign-in on your device.

<img src="/files/xPzphOBdOsC2FhJ4qUlC" alt="" width="563">

2. When adding a FIDO key for server authentication, use the **fingerprint sensor** or log in via **PIN**.

<img src="/files/o1mtIJQ0fYHyLXxy7vvV" alt="" width="375">

3. In the upper right corner of the window, click the **profile icon**, select **Profile** from the drop-down list, and go to **FIDO2 Authenticators**.

<figure><img src="/files/gYrsajJVZle1LzM7JlVT" alt="" width="563"><figcaption></figcaption></figure>

4. Choose **Platform**, optionally check **Use Usernameless**, click **Next**, enter your **PIN**, set an authentication name, and click **Done**.

<div><figure><img src="/files/ul8jZYud14h0lEijYjEx" alt=""><figcaption></figcaption></figure> <figure><img src="/files/NYZbRtcrn8FhNUfoLJ0R" alt=""><figcaption></figcaption></figure> <figure><img src="/files/Eecy1BV2Jj6I7qA6nhlB" alt=""><figcaption></figcaption></figure> <figure><img src="/files/mBdyZTnC0NxG88rPOnOE" alt=""><figcaption></figcaption></figure></div>

### Apple iPhone

1. Set up **Touch ID** on your iPhone.
2. When adding a FIDO key, scan your **fingerprint** using the sensor.&#x20;
3. Name the key and touch **Done**.

***

### **Android**

1. Enable **fingerprint** or **PIN unlock** on your Android device.
2. When adding a FIDO key, scan your **fingerprint** or log in via **PIN**. Touch **Get Started**, then select **Use this device with screen lock**.
   * If using **fingerprint unlock**, scan your fingerprint.
   * If using **PIN unlock**, touch **Use screen lock** and enter your PIN.
3. Name the key and touch **Done**.

***

## &#x20;**Authorization via the platform key** <a href="#shag-2-avtorizaciya-s-pomoshyu-fido-klyucha" id="shag-2-avtorizaciya-s-pomoshyu-fido-klyucha"></a>

### Windows 10

1. Select the **Sign in with a Security Key** option.
2. Choose your user in the next window and click **OK**.
3. **Scan your fingerprint** using the sensor, or log in via **PIN**.

<div><figure><img src="/files/wPA2Os4zYf279aSsQUJx" alt=""><figcaption></figcaption></figure> <figure><img src="/files/SB4W2DgNiREmOrLA3NWN" alt=""><figcaption></figcaption></figure> <figure><img src="/files/8TKP7ku9FTt7Z19GrgGG" alt=""><figcaption></figcaption></figure></div>

### **Apple iPhone**

1. Select the **Sign in with a Security Key** option.
2. **Scan your fingerprint** using the sensor.

<div><figure><img src="/files/YPUMz9SmqSJ9LOKuPSx3" alt="" width="272"><figcaption></figcaption></figure> <figure><img src="/files/QMhENVgbB0Md7QrOSYhY" alt="" width="238"><figcaption></figcaption></figure></div>

***

### **Android**

{% hint style="info" %}
**Note**: Android does not support usernameless FIDO authentication.
{% endhint %}

1. Enter your login and touch **Next**.
2. Select **Sign in with a Security Key**.

<div><figure><img src="/files/y47RGE3bTx2vLeRBM9PC" alt="" width="265"><figcaption></figcaption></figure> <figure><img src="/files/s5pVfsaNEXGNcDjePpXh" alt="" width="264"><figcaption></figcaption></figure></div>

1. **Scan your fingerprint** using the sensor, or log in via **PIN**:
   * If using **fingerprint unlock**, scan your fingerprint.
   * If using **PIN unlock**, touch **Use screen lock** and enter your PIN.

<div><figure><img src="/files/CGHEYKBcyX1mDd7PKyAB" alt="" width="188"><figcaption></figcaption></figure> <figure><img src="/files/sjgYS0xw7OwkHKE0Ek8v" alt="" width="188"><figcaption></figcaption></figure></div>

***

### **Using the Platform Key as a Second Factor**

You can also use a platform key for two-factor authentication. To do this, set up your platform key as described above. Then, at the login screen, input your **login** and **password**, and choose **Security Key** from the list of two-factor authentication methods.