1. After signing into your computer post-upgrade, if your device has an integrated camera or fingerprint scanner, you'll see the biometric sign-in options screen shown below. If you want to set up a biometric sign-in option, please follow the steps in the Biometric Sign-In Options section of this knowledge document.
Note: You can also click Skip for now to skip this step.
2. If your computer does not have an integrated camera or fingerprint scanner, you will see the main Windows Hello screen shown below. Click the OK button to continue.
3. A popup window will appear, and your GVSU email address will already be populated based on the username you used to sign into the computer. Click the Next button.
4. Enter your password into the Password field, then click the Sign in button.
5. The next screen is the Keep your account secure screen. From here, you have many options for setting up additional authentication methods, including phone calls, text messages, hardware tokens, the Microsoft Authenticator app, and other authenticator apps. You will need to set up an authentication method to proceed with the setup of Windows Hello. Please use the Biometric Sign-In Options, Phone Options, or Authenticator App Options sections of this knowledge document to select a method that works best for you.
Biometric Sign-In Options
Face ID
1. Click the Yes, set up button.
2. Your camera will scan your face to be used to sign in. Follow the directions onscreen while the scan occurs.
3. After your face has registered, click the Next button.
Fingerprint ID
1. Click the link that reads Use your fingerprint instead.
2. Click the Yes, set up button.
3. Touch your fingerprint sensor with the finger you would like to use to sign into your computer.
4. Follow the directions onscreen to complete the fingerprint registration process.
5. After your fingerprint has registered, click the Next button.
Windows Hello PIN
PIN (Personal Identification Number)
As an additional layer of security, you will also be required to set up a PIN. A PIN is an alphanumeric code that will act as a password for the device you're using. PIN codes need to be at least 6 characters long. By default, your PIN code must be 6 numbers long. To include letters or symbols in your PIN, please click the Include letters and symbols checkbox.
1. Create a new PIN (personal identification number) that meets the policy requirements above.
2. Enter your PIN into the New PIN field. Enter the same PIN in the Confirm PIN field, then click the OK button.
3. Click the OK button.
Authenticator App Options
Microsoft Authenticator
Note: Before starting the steps for the Microsoft Authenticator app, please download it from the Google Play Store (Android) or the App Store (iOS).
1. Click the Next button.
2. Open the Microsoft Authenticator app on your device.
3. Follow the instructions onscreen, then click the Next button.
4. Follow the instructions onscreen, then click the Next button.
5. The Microsoft Authenticator will prompt you to enter the code you see onscreen. Enter the code into the app and click the Next button.
6. After receiving the Notification approved message, click the Next button.
7. Click the Done button.
Additional Authenticator Apps
Note: The only 3rd-party authenticator apps recommended by GVSU IT are Google Authenticator and Okta Verify.
1. On the screen that asks you to set up the Microsoft Authenticator app, click the link that reads, I want to set up a different authenticator app.
2. Follow the instructions onscreen, then click the Next button.
3. Follow the next set of instructions onscreen, then click the Next button.
4. Enter the code from your authenticator app, then click the Next button.
5. Click the Done button.
Hardware Token Options
USB Security Key
1. On the screen that asks you to set up the Microsoft Authenticator app, click the link that reads: I want to set up a different method.
2. Click on the Hardware token option.
3. Enter the serial number for your hardware token into the Enter serial number field, then click the Next button.
Additional steps for setting up the security key authentication option will be available soon.
Phone Options
Note: Phone options for Windows Hello are the least secure and should only be used if no other authentication options are available.
Cell Phone Call
1. On the screen that asks you to set up the Microsoft Authenticator app, click the link that reads: I want to set up a different method.
2. Click on the Phone option.
3. Click the Call me radio button.
4. Enter your phone number into the Enter phone number field, then click the Next button.
5. You will arrive at the following screen. Informing you of an incoming phone call to the number provided. Answer the phone call and follow the instructions in the automated message to continue.
6. Once you receive a message that starts with Call answered, click the Next button.
7. Click the Done button.
Cell Phone Text
1. On the screen that asks you to set up the Microsoft Authenticator app, click the link that reads: I want to set up a different method.
2. Click on the Phone option.
3. Enter your phone number into the Enter phone number field, then click the Next button.
4. You will receive a text message with a code on your phone. Enter the code into the Enter code field, then click the Next button.
5. After you receive a message stating Verification complete, click the Next button.
6. Click the Done button.
Office Phone Call
1. On the screen that asks you to set up the Microsoft Authenticator app, click the link that reads: I want to set up a different method.
2. Click on the Office phone option.
3. Enter your work phone number or extension into the corresponding field, then click the Next button.
4. You will arrive at the following screen. Informing you of an incoming phone call to the number provided. Answer the phone call and follow the instructions in the automated message to continue.
5. Once you receive a message that starts with Call answered, click the Next button.
6. Click the Done button.
Changing Authentication Methods
After setting up an authentication method or pressing skip during the setup process, you can change the method you set up once signed in to the computer. To change your authentication method, please follow the steps below.
1. Click on the Windows 11 Search bar at the bottom of your screen and type Sign-in options.
2. Click Sign-in options under Best match.
3. Click on the dropdown menu for the authentication option you want to change. For this example, we will be using the PIN (Windows Hello) option.
4. Click the Change PIN button.
Note: The text on this button will change based on the authentication method you're attempting to change.
