search

Angelelz / WinHelloUnlock

KeePass 2 plugin to automatically unlock databases with Windows Hello
MIT License
169 stars 17 forks source link

WinHello not available #45

Open MartinCorteza opened 4 years ago

MartinCorteza commented 4 years ago

I'm using an USB-fingeprint Reader on my Win 10 v1909 machine. I've activated WinHello via fingerprint in the settings of my account. When I try to use WinHelloUnlock, there is no popup after unlocking the database. When I try to activate WinHello via the plugins interface, it says "WinHello not available".

Any idea why the plugin doesn't recognize the fingerprint reader when the OS itself does recognize it?

Angelelz commented 4 years ago

Hello, thank you for reporting your issue. Could you provide a screen capture of sign-in options in settings app?

MartinCorteza commented 4 years ago

Here you are... Win_Hello_KPdlg Win_Hello_KPFail

Angelelz commented 4 years ago

I'm sorry for the long delay, as you may know, stuff is quite complicated right now. I think this is most likely a Windows Hello issue. Could you please go into Windows settings > Accounts > Sign-in options and give us a screenshot there? Is this a personal computer?

MartinCorteza commented 4 years ago

This is a PC with a Kensington USB fingerprint reader. The reader is configured in Windows Hello and fingerprints are learned. It does work unlocking Windows. This is a German version of Win10, but I hope you can guess from the screenshot that everything is configured as it should.

Whello

Angelelz commented 4 years ago

Beats me! I'm guessing it's hardware related. Have you tried KeepassWinHello?

MartinCorteza commented 4 years ago

I want an easy solution...:-). If you think it is hardware related, could I try other auth devices on WinHello, let's say cam unlock?

Angelelz commented 4 years ago

The thing about this issue is that I'm unable to reproduce, because I don't have your hardware. From a technical standpoint, I know Windows Hello uses either TPM v2.0, which means the key pair is bound to the hardware or software. Because your computer probably does not implement any TPM chip (you have an external USB fingerprint reader), I'm guessing there could be an issue there; also, in this plugin I just use Windows APIs to access Windows Hello functionality, and those are very limited.

Another question though, when you use Windows Hello, are you able to fallback to pin?

I suggest you try a similar plugin with the same functionality called KeePassWinHello