DDP and Windows Hello

Hello @alexehrlich 

The article is in reference to using the Dell Data Protection | Security Tools product only. That product is end of life and is no longer being updated. 

If you are using the PBA feature, I'm assuming that you are using encryption as well?

If so, then we do support Windows Hello starting around 8.18.0.

Can you tell me what version of the product you are using by referencing, How to Identify the Dell Encryption Enterprise \ Dell Encryption Personal Self-Encrypting Drive Version. 

-Brian

L4 | Dell Data Security #IWork4Dell

Hello Brian, The KB I've referred to says that users have an either-or ;-/. I've tried various 10.x versions and failed to make Hello work (there is just no PIN/Fingerprint option to log in). However, in the DDP 10.3.0.3 release notes PDF I've found a well-hidden gem stating that _since this version_ it is possible to create a registry entry in "HKEY_LOCAL_MACHINE\SOFTWARE\Dell\Dell Data Protection" named "AllowOtherCredProviders" (dword) that obviously (re)allows other providers if set to 1. Tried it and the magic happened -- Hello came back with both PIN and Fingerprint login (the "Sign-in options" became available again). Not that this 10.3 didn't introduce its own new problems but at least this one had been solved.

I have the same problem - cannot use Windows Hello services such as fingerprint or contactless card reader once newer DDP (Personal Edition) versions installed and SED hard drive encryption set.

Where can I download DDSSetup 10.3.0.3?  I only found 10.3.0.2 online.

Thanks!

@MSCBob 

To clarify, Windows Hello can be re-enabled in Windows with Dell Encryption 10.3.0 and later using the registry:

HKLM\SOFTWARE\Dell\Dell Data Protection\
"AllowOtherCredProviders" = DWORD:1
0=Disabled (default)
1=Enabled

This will not enable it within the PBA, only at Windows login. Using the Dell Encryption credential provider process is required to unlock in the PBA.

10.3.0 download link:

https://www.dell.com/support/home/us/en/04/drivers/driversdetails?driverid=KGG81&oscode=WT64A&productcode=dell-data-protection-encryption

Note: You are probably seeing a difference in the build link (10.3.0.2) compared to installed version as the build package versioning slightly differs.

Let me know if you have any questions or issues.

-Brian

L4 | Dell Data Security #IWork4Dell

Thank you! 

By installing DDS 10.30.0.2, getting the Windows Group Policy biometrics login settings enabled, and setting the mentioned registry key, I am able to now use DDS to manage my SED encryption and still register fingerprints for use at Windows 10 login on my Dell Latitude 5580 laptops.

I don't see the SIGN IN OPTIONS on the Windows Login screen to use the fingerprint reader unless I set the registry key.  Once registry key set, I can even use the fingerprint reader from the login picture screen and it logs right in to the associated Windows account.