https://ferdyverse.de/tags/tipps/Recent content in Tipps on ferdyverseHugodeFri, 24 Apr 2026 00:01:25 +0200https://ferdyverse.de/posts/win11-und-fido2/Fri, 24 Apr 2026 00:01:25 +0200https://ferdyverse.de/posts/win11-und-fido2/<p>Für alle, denen es auf die Nerven geht, dass Windows 11 bei der Abfrage eines Hardware-Security-Keys standardmäßig immer &ldquo;iPhone, iPad oder Android-Gerät&rdquo; vorauswählt - habt ihr eine Lösung gefunden?</p> <p>Ich habe Dinge wie das hier versucht - leider ohne Erfolg:</p> <div class="highlight has-title"> <span class="highlight__title">Set GPO via Powershell</span> <pre class="chroma"><code class="language-powershell" data-lang="powershell"><span class="line"><span class="cl"><span class="c"># Create registry key</span> </span></span><span class="line"><span class="cl"><span class="nb">New-Item</span> <span class="n">-Path</span> <span class="s2">&#34;HKLM:\SOFTWARE\Policies\Microsoft\Windows\SecondaryAuthenticationFactor&#34;</span> <span class="n">-Force</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c"># Set property</span> </span></span><span class="line"><span class="cl"><span class="nb">Set-ItemProperty</span> <span class="n">-Path</span> <span class="s2">&#34;HKLM:\SOFTWARE\Policies\Microsoft\Windows\SecondaryAuthenticationFactor&#34;</span> <span class="p">`</span> </span></span><span class="line"><span class="cl"> <span class="n">-Name</span> <span class="s2">&#34;AllowSecondaryAuthenticationDevice&#34;</span> <span class="n">-Value</span> <span class="mf">0</span> <span class="n">-Type</span> <span class="n">DWord</span> <span class="n">-Force</span> </span></span><span class="line"><span class="cl"> </span></span><span class="line"><span class="cl"><span class="c"># Check result</span> </span></span><span class="line"><span class="cl"><span class="nb">Get-ItemProperty</span> <span class="s2">&#34;HKLM:\SOFTWARE\Policies\Microsoft\Windows\SecondaryAuthenticationFactor&#34;</span></span></span></code></pre> </div> <p>oder aber auch:</p> <div class="highlight has-title"> <span class="highlight__title">Disable FIDO2</span> <pre class="chroma"><code class="language-cmd" data-lang="cmd"><span class="line"><span class="cl"># FIDO2-Sicherheitsschlüssel deaktivieren </span></span><span class="line"><span class="cl">reg add <span class="s2">&#34;HKLM\SOFTWARE\Policies\Microsoft\FIDO&#34;</span> /v EnableFIDODeviceLogon /t REG_DWORD /d 0 /f</span></span></code></pre> </div> <p>Beides scheint nicht zu funktionieren&hellip; warum auch immer&hellip; <strong>Lösung gesucht!</strong></p>