sirAndros / KeePassWinHello

Quick unlock KeePass 2 database using biometrics with Windows Hello
MIT License
318 stars 23 forks source link

Error "Windows Hello is disabled on your system" #17

Closed sambul13 closed 5 years ago

sambul13 commented 5 years ago

On a PC with Windows 10 Pro R1809 with latest updates, I added KeePassWinHello 2.1 to KeePass 2.41 plugins folder, and launched KeePass. Upon login with Master Password, and opening WindowsHello tab in Options, the tab error says "Windows Hello is disabled on your system". But it's actually enabled and working, I login to the PC with fingerprint login.

sambul13 commented 5 years ago

Also, after installing KeePassWinHello v2.1, it identifies as KeePassWinHello v2.0 .

sirAndros commented 5 years ago

Also, after installing KeePassWinHello v2.1, it identifies as KeePassWinHello v2.0 .

This fixed in #16. Please, try to download again.

sirAndros commented 5 years ago

@sambul13, hello! Can You check what says windows about this? Navigate to Settings>Accounts>Sign-in Options. Does windows determinate WinHello as available on your PC? For my old PC its looks like this: image

sambul13 commented 5 years ago

Yes, its available in Settings, and as I said before, I use it every day by fingerprint sign in to Windows. Further, I installed Fingerprint KeePass plugin, and it works OK, though stability can be improved. I like your plugin more since its simpler to add, but it doesn't work. :)

sambul13 commented 5 years ago

See screenshots

WinHello WinLogin

sambul13 commented 5 years ago

The issue was fixed by following this similar issue. Basically, for home PCs with Windows 10 Pro or Enterprise not connected to a domain and Active Directory, a user needs to enable Convenience PIN sign-in in Local Group Policy Editor, and disable Windows Hello for Business, since its not used anyway. One must still add his fingerprint and Convenience PIN in Windows Settings - Sign-In Options. The PIN can be set as complex as Windows login password or the same, its entered after the fingerprint is not recognized 3 times. See here for details.

sirAndros commented 5 years ago

Thank you a lot for this research! Can we include this as is in our readme?

sambul13 commented 5 years ago

Of course. But Windows Hello keeps evolving with new Windows releases.

sirAndros commented 5 years ago

Thank you! Of course, it will helps only until Microsoft do breaking changes as they do usually :)