capabilities.work

Windows Hello Enroll Key Credential

A 3-step recipe with Microsoft Windows 10. We can help you get access.

Recipe · 3 steps

Windows Hello Enroll Key Credential

Create a Windows Hello key credential and obtain its attestation.

  1. Confirm Windows Hello is supported on this device before attempting to create a credential.
  2. Create a new Windows Hello key credential for the account, generating a device-bound key pair and returning the public key.
  3. Retrieve the attestation buffer and certificate chain for the newly created credential so a server can verify it was generated in a TPM.
What you'll need to have ready
  • accountId: Unique account identifier the credential is created for.
  • keyCreationOption: Whether to replace an existing credential or fail if one exists.
For your developer

Arazzo workflow microsoft-windows-10:enroll-key-credential, 3 operations: checkHelloAvailability → createKeyCredential → getKeyAttestation. Specs on APIs.io.