{"id":11322,"date":"2023-02-24T12:17:10","date_gmt":"2023-02-24T12:17:10","guid":{"rendered":"https:\/\/myworldofit.net\/?p=11322"},"modified":"2024-01-31T14:12:50","modified_gmt":"2024-01-31T14:12:50","slug":"fido2-security-key-sign-in-to-windows-your-credentials-couldnt-be-verified","status":"publish","type":"post","link":"https:\/\/myworldofit.net\/?p=11322","title":{"rendered":"FIDO2 Security Key Sign-In to Windows &#8211; Your credentials couldn&#8217;t be verified."},"content":{"rendered":"<p>When setting up <a href=\"https:\/\/learn.microsoft.com\/en-us\/azure\/active-directory\/authentication\/howto-authentication-passwordless-security-key-windows\">Passwordless security key sign-in Windows<\/a> and attempting to sign-in to the first machine you have setup (although it could be any machine!) you may encounter the error:<\/p>\n<blockquote><p>Your credentials couldn&#8217;t be verified. (code: 0x000006d, 0x0)<\/p><\/blockquote>\n<p>This error message appears even though you can sign-in with the key to AzureAD and other web services.<\/p>\n<p>The cause is likely to be the account you are testing with is a member of the Domain Admins (or a similar) privileged security group, I keep bumping into this one but can&#8217;t find the source article where I first read this. If I manage to find the article I&#8217;ll post a link!<\/p>\n<p><strong>UPDATE 31\/01\/2024:<\/strong> It appears there is a way to overcome this issue with a modification of Active Directory objects described at: <a href=\"https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/authentication\/howto-authentication-passwordless-faqs#fido2-security-key-sign-in-isnt-working-for-my-domain-admin-or-other-high-privilege-accounts-why\">https:\/\/learn.microsoft.com\/en-us\/entra\/identity\/authentication\/howto-authentication-passwordless-faqs#fido2-security-key-sign-in-isnt-working-for-my-domain-admin-or-other-high-privilege-accounts-why<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>When setting up Passwordless security key sign-in Windows and attempting to sign-in to the first machine you have setup (although it could be any machine!) you may encounter the error: Your credentials couldn&#8217;t be verified. (code: 0x000006d, 0x0) This error message appears even though you can sign-in with the key to AzureAD and other web services. The cause is likely&#8230; <a class=\"read-more\" href=\"https:\/\/myworldofit.net\/?p=11322\">Read more<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[20],"tags":[463,462,453],"series":[],"class_list":["post-11322","post","type-post","status-publish","format-standard","hentry","category-software","tag-fido2","tag-security-key","tag-yubikey"],"_links":{"self":[{"href":"https:\/\/myworldofit.net\/index.php?rest_route=\/wp\/v2\/posts\/11322","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/myworldofit.net\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/myworldofit.net\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/myworldofit.net\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/myworldofit.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=11322"}],"version-history":[{"count":2,"href":"https:\/\/myworldofit.net\/index.php?rest_route=\/wp\/v2\/posts\/11322\/revisions"}],"predecessor-version":[{"id":11362,"href":"https:\/\/myworldofit.net\/index.php?rest_route=\/wp\/v2\/posts\/11322\/revisions\/11362"}],"wp:attachment":[{"href":"https:\/\/myworldofit.net\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=11322"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/myworldofit.net\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=11322"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/myworldofit.net\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=11322"},{"taxonomy":"series","embeddable":true,"href":"https:\/\/myworldofit.net\/index.php?rest_route=%2Fwp%2Fv2%2Fseries&post=11322"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}