4 days Ago
Microsoft update can kill Winodws Hello. getty Just when you thought Microsoft couldn’t get things any worse with Windows security update failures after the “ do not delete this dodgy-sounding folder ” debacle, like London buses, along comes another. This time, Microsoft has confirmed that Windows Hello has been kiboshed following the latest Patch Tuesday updates.
Here’s what you need to know and how to fix the problem of Microsoft’s making. The following three statements are all true: Windows 11 is the most secure version of Microsoft’s operating system so far. Windows Hello is a secure method of logging in.
Patch Tuesday security updates are essential to keep your systems and data protected from attacks. Unfortunately, as some users have recently discovered, combining these three things can also lead to unexpected consequences. After installing KB5055523 as part of the April Patch Tuesday security update rollout, the same update that inserted the “inetpub” folder onto unsuspecting users’ systems without warning, causing something of a social media privacy conspiracy storm , Microsoft has confirmed that “some users might be unable to login to their Windows services using Windows Hello facial recognition or PIN.
” I feel an oops coming on, a stonking great oops, in fact. The only mitigation that I will allow Microsoft regarding this biometric-botching update is that the problem only impacts Windows 11 24H2 users and server platforms with the cumulative update applied, where a very specific set of security features has been enabled. This still doesn’t excuse Microsoft for not properly testing the update against these configurations before rolling it out to a global audience, of course.
That security configuration in question is where the System Guard Secure Launch or Dynamic Root of Trust for Measurement feature has been enabled after installing the update. If you fall into this user pool, then Microsoft warned: “After installing this update and performing a Push button reset or Reset this PC from Settings > System > Recovery and selecting Keep my Files and Local install, some users might be unable to login to their Windows services using Windows Hello facial recognition or PIN.” Microsoft has advised that the following workarounds can be used while, one presumes, it works on a proper fix: In order to use a PIN to login, Windows 11 users will need to follow the “Set my PIN” prompts from the login screen to re-enroll for the Windows Hello feature.
The same re-enrollment process is required if you want to use your biometrics. Users are advised to go to Settings > Accounts > Sign-in options > Facial recognition and follow the instructions after selecting the set-up option. I have reached out to Microsoft for a statement regarding the Windows Hello security update issue.
.
