Whfb broke after CRL expired

Question

Hi,

We have a hybrid environment configured.

Servers on 2019.

CRL expired but was renewed.

We are now unable to use whfb to authenticate in our domain. Our smart card seems to still work. We run a passwordless system so smart card is the only way we are getting in.

Does anyone have any idea on what I could have missed or what to check to confirm what broke? Need to get whfb working.

Thanks!

Answer 1

Hello

Thank you for posting in Q&A forum.

Renew CRL won't affect your Windows hello for business, cause client will auto get new CRL after current one expires.

Windows Hello for Business supports many kinds of way to login

• Facial recognition
• Fingerprint recognition
• Iris Recognition
• PIN

Windows Hello for Business overview | Microsoft Learn

Is this all can't work in your environment?

Windows hello for business is set by Group policy. So you can check is here here some change in your Group Policy.

Windows Hello for Business policy settings | Microsoft Learn

Best regards

Yanhong

=====================================

If the answer is helpful, please click "Accept answer" and upvote it