Windows Hello ESS Expands Secure Fingerprint Sign-in to External Devices

Windows Hello Enhanced Sign-in Security (ESS) has been updated to support external fingerprint readers for Windows 11 versions 24H2 and 25H2. This feature enhances security by isolating biometric processing from the main operating system. The update, identified as KB5101684, allows desktop users to utilize external biometric devices, previously limited to laptops with built-in hardware. This expansion aims to provide a more secure authentication method without altering the user experience. Windows administrators are advised on hardware requirements, enrollment processes, and deployment limits. The new feature is part of ongoing efforts to improve security in Windows environments.

Key Points: • Windows Hello ESS now supports external fingerprint readers for Windows 11. • The KB5101684 update enhances security by isolating biometric processing. • Desktop users gain access to secure sign-in options previously available only on laptops.