Windows Hello for Business

Win - OIB - ES - Windows Hello for Business - D - WHfB Configuration - v3.2

CMMC Control Mapping Matrix

Name	Value
Basics
Name	Win - OIB - ES - Windows Hello for Business - D - WHfB Configuration - v3.2
Description
Profile type	Settings catalog
Category	Account protection
Policy type	Account Protection
Platform supported	Windows 10 and later
Created	Thursday, February 26, 2026 5:34:12 AM
Last modified	Thursday, February 26, 2026 5:34:12 AM
Scope tags	Default

Table 7. Basics - Win - OIB - ES - Windows Hello for Business - D - WHfB Configuration - v3.2

Name	Value
Windows Hello For Business
Device-scoped settings
Require Security Device	true
Minimum PIN Length	6
Use Windows Hello For Business (Device)	true
Use Certificate For On Prem Auth	Disabled
Enable Pin Recovery	true
Facial Features Use Enhanced Anti Spoofing	true

Table 8. Settings - Win - OIB - ES - Windows Hello for Business - D - WHfB Configuration - v3.2

Win - OIB - SC - Windows Hello for Business - D - Cloud Kerberos Trust - v3.5

Name	Value
Basics
Name	Win - OIB - SC - Windows Hello for Business - D - Cloud Kerberos Trust - v3.5
Description	NOTE: Requires setup of Cloud Kerberos Trust to function. https://learn.microsoft.com/en-us/windows/security/identity-protection/hello-for-business/deploy/hybrid-cloud-kerberos-trust
Profile type	Settings catalog
Platform supported	Windows 10 and later
Created	Thursday, February 26, 2026 5:34:12 AM
Last modified	Thursday, February 26, 2026 5:34:12 AM
Scope tags	Default

Table 17. Basics - Win - OIB - SC - Windows Hello for Business - D - Cloud Kerberos Trust - v3.5

Name	Value
Kerberos
Cloud Kerberos Ticket Retrieval Enabled	Enabled
Windows Hello For Business
Device-scoped settings
Use Cloud Trust For On Prem Auth	Enabled

Table 18. Settings - Win - OIB - SC - Windows Hello for Business - D - Cloud Kerberos Trust - v3.5