1. When signing into your Windows 11 laptop for the first time, you will arrive at the Windows Hello setup screen. If your device has an integrated camera or fingerprint scanner, you'll see the biometric sign-in options screen shown below. You can also access this screen at any time by typing Sign-in options into the Windows search bar and clicking on Sign-in options under Best match. From there, select either Facial recognition (Windows Hello) or Fingerprint recognition (Windows Hello). You can see this process in more detail by clicking on the Desktop Setup section of this knowledge document.
Note: You can also click Skip for now to skip this step.
2. If your computer does not have an integrated camera or fingerprint scanner, you will see the main Windows Hello screen shown below. Click the OK button to continue.
3. A pop-up window will appear, and your GVSU email address will already be populated based on the username you used to sign into the computer. Click the Next button.
4. Enter your password into the Password field, then click the Sign in button.
5. You will arrive at the following screen. At this point, setting up multifactor authentication is required. The default method is the Microsoft Authenticator app, but multiple authentication options are available. Each option will be detailed in the Authentication Methods section below.
Microsoft Authenticator
Microsoft Authenticator App
1. Click the Next button.
2. Click the Next button.
3. Download and install the Microsoft Authenticator app on your mobile device. After the app installs, scan the QR code using the QR code button. Once your account has been connected, click the Next button.
4. Enter the number shown on screen into the Microsoft Authenticator app. After entering the number into the app.
Note: This number will be different for everyone.
5. Click the Done button.
Phone
Phone
1. Click the Set up a different way to sign in option.
2. Click the Phone button.
3. Enter your phone number into the Phone number field, then press the Next button.
4. Enter the code that was texted to your phone into the Enter code field, then press the Next button.
5. Click the Done button.
6. After successfully adding your phone authentication option, you will need to authenticate with it. Click the Text button or the Call button, based on your personal preference.
Note: If you clicked the Text button, proceed to step 6a. If you clicked the Call button, proceed to step 6b.
6a. Enter the code you received through text or call into the Code field, then press the Verify button.
6b. You will receive a phone call momentarily. Please follow the instructions on the call to authenticate.
Other Authentication Apps
Other Authentication Apps
1. Click the Set up a different authentication app option.
2. Click the Next button.
3. Scan the QR code shown on your screen and follow the steps inside the authentication app you're using. Once your account has been connected, click the Next button.
4. Enter a code from your authentication app in the Code field, then click the Next button.
5. Click the Done button.
6. You will now need to authenticate using the app you just added. Enter a code from your authentication app in the Code field, then click the Verify button.
Hardware Token
Hardware Token
Hardware token authentication is being tested and is not usable at this time. Should the option become available, this section will be updated.
6. The next screen is the Keep your account secure screen. From here, you have many options for setting up additional authentication methods, including phone calls, text messages, hardware tokens, the Microsoft Authenticator app, and other authenticator apps. You will need to set up an authentication method to proceed with the setup of Windows Hello. Please choose a Windows Hello authentication method from the list below that works best for you.
Face ID
1. Click the Yes, set up button.
2. Your camera will scan your face to be used to sign in. Follow the directions onscreen while the scan occurs.
3. After your face has registered, click the Next button.
Fingerprint ID
1. Click the link that reads Use your fingerprint instead.
2. Click the Yes, set up button.
3. Touch your fingerprint sensor with the finger you would like to use to sign into your computer.
4. Follow the directions onscreen to complete the fingerprint registration process.
5. After your fingerprint has registered, click the Next button.
PIN (Personal Identification Number)
As an additional layer of security, you will also be required to set up a PIN. A PIN is an alphanumeric code that will act as a password for the device you're using. PIN codes need to be at least 6 characters long. By default, your PIN code must be 6 numbers long. To include letters or symbols in your PIN, please click the Include letters and symbols checkbox.
1. Create a new PIN (personal identification number) that meets the policy requirements above.
2. Enter your PIN into the New PIN field. Enter the same PIN in the Confirm PIN field, then click the OK button.
3. Click the OK button.
Microsoft Authenticator
Note: Before starting the steps for the Microsoft Authenticator app, please download it from the Google Play Store (Android) or the App Store (iOS).
1. Click the Next button.
2. Open the Microsoft Authenticator app on your device.
3. Follow the instructions onscreen, then click the Next button.
4. Follow the instructions onscreen, then click the Next button.
5. The Microsoft Authenticator will prompt you to enter the code you see onscreen. Enter the code into the app and click the Next button.
6. After receiving the Notification approved message, click the Next button.
7. Click the Done button.
Additional Authenticator Apps
Note: The only 3rd-party authenticator apps recommended by GVSU IT are Google Authenticator and Okta Verify.
1. On the screen that asks you to set up the Microsoft Authenticator app, click the link that reads, I want to set up a different authenticator app.
2. Follow the instructions onscreen, then click the Next button.
3. Follow the next set of instructions onscreen, then click the Next button.
4. Enter the code from your authenticator app, then click the Next button.
5. Click the Done button.
Note: The phone options below are the least secure and should only be used if no other authentication options are available.
Cell Phone Call
1. On the screen that asks you to set up the Microsoft Authenticator app, click the link that reads: I want to set up a different method.
2. Click on the Phone option.
3. Click the Call me radio button.
4. Enter your phone number into the Enter phone number field, then click the Next button.
5. You will arrive at the following screen. Informing you of an incoming phone call to the number provided. Answer the phone call and follow the instructions in the automated message to continue.
6. Once you receive a message that starts with Call answered, click the Next button.
7. Click the Done button.
Cell Phone Text
1. On the screen that asks you to set up the Microsoft Authenticator app, click the link that reads: I want to set up a different method.
2. Click on the Phone option.
3. Enter your phone number into the Enter phone number field, then click the Next button.
4. You will receive a text message with a code on your phone. Enter the code into the Enter code field, then click the Next button.
5. After you receive a message stating Verification complete, click the Next button.
6. Click the Done button.
Office Phone Call
1. On the screen that asks you to set up the Microsoft Authenticator app, click the link that reads: I want to set up a different method.
2. Click on the Office phone option.
3. Enter your work phone number or extension into the corresponding field, then click the Next button.
4. You will arrive at the following screen. Informing you of an incoming phone call to the number provided. Answer the phone call and follow the instructions in the automated message to continue.
5. Once you receive a message that starts with Call answered, click the Next button.
6. Click the Done button.
The Windows Hello setup process is now complete.
Changing Authentication Methods
After setting up an authentication method or pressing skip during the setup process, you can change the method you set up once signed in to the computer. To change your authentication method, please follow the steps below.
1. Click on the Windows 11 Search bar at the bottom of your screen and type Sign-in options.
2. Click Sign-in options under Best match.
3. Click on the dropdown menu for the authentication option you want to change. For this example, we will be using the PIN (Windows Hello) option.
4. Click the Change PIN button.
Note: The text on this button will change based on the authentication method you're attempting to change.
