1. Understanding Windows Login with Security Key

• Windows 10/11 Home: Unfortunately, security keys like the Thetis Pro cannot be used for direct Windows login without using a Microsoft service like Azure Active Directory (Azure AD) or Windows Hello for Business.

• Windows 10/11 Pro or Enterprise: You can use a FIDO2 key for passwordless login if your system is integrated with Azure AD or Hybrid AD Join.

2. If You Are Using Azure Entra ID (formerly Azure Active Directory)

To use the Thetis Pro key with Azure AD for passwordless Windows login:

1. Enable Security Key Authentication:

   • Sign in to the Azure Portal.

   • Go to Azure Entra ID > Security > Authentication methods.

   • Ensure FIDO2 Security Key is enabled for your organization.

2. Register Your Thetis Pro Security Key:

   • Go to My Sign-Ins.

   • Select Add sign-in method > Security Key.

   • Follow the instructions to insert and configure your key.

3. Login Process:

   • At the Windows login screen, select Sign in options.

   • Choose Sign in with a security key and insert your Thetis Pro.

3. If You Are Using On-Premises Active Directory

If your system is Hybrid AD joined, here are the steps:

1. Ensure Windows Hello for Business is configured with Hybrid Key Trust or Certificate Trust.

2. Register your Thetis Pro key via My Sign-Ins.

3. Use the Sign in with a security key option on the Windows login screen.

4. Troubleshooting Common Issues

• Ensure Windows Is Updated: Windows 10 version 1903 or later is required for FIDO2 key support.

• Try a Different USB Port: Ensure the key is recognized correctly.

• Reset and Re-register: If issues persist, reset the Thetis Pro key and repeat the setup.