Environment
MiWorkspace, Windows 11 25H2
Issue
After upgrading to Windows 11 25H2, my external/USB webcam or fingerprint reader no longer works with Windows Hello, and I cannot use it for biometric sign-in.
Resolution
Windows 11 25H2 introduced a security feature called Enhanced Sign-in Security (ESS), which prevents the use of insecure external/USB biometric devices with Windows Hello. The Enhanced Sign-in Security feature minimizes abuse of biometric factors by ensuring that the data is encrypted and securely stored.
To continue using Windows Hello:
- Use the computer’s built-in webcam or built-in fingerprint reader for Windows Hello sign-in.
- If your device does not have built-in biometric hardware, use an alternative sign-in method (such as PIN or password).
Additional Information
Why is Enhanced Sign-in Security enabled on my device?
Enhanced Sign-in Security (ESS) is a Windows Hello feature that protects your face or fingerprint data using dedicated, isolated hardware on your computer. With ESS enabled, your biometric data is processed in a protected area of memory that is walled off from the rest of Windows, so even if the operating system were compromised by malware, your face and fingerprint information, and the sign-in credentials they unlock, could not be stolen or tampered with. We enforce ESS on all managed devices to ensure your identity and university credentials receive the strongest protection available.
One side effect of this protection: external webcams and USB fingerprint readers can't be used for Windows Hello sign-in, since ESS only permits sensors that meet its hardware security requirements. Your built-in camera or fingerprint reader will work normally, and external cameras still work fine in apps like Teams and Zoom — the restriction only applies to signing in.
For more details, see the Windows Hello on MiWorkspace Computers knowledge article.
Refer to Microsoft’s article regarding Windows Hello common issues and troubleshooting tips.
Need additional information or assistance? Contact the ITS Service Center.