Using a security key with Azure Virtual Desktop

I recently won a Feitian security key with the Azure Academy. I decided to create this blogpost about my experience using it with AVD.

In this blogpost I’ll cover the following:

  • Enable the authentication method for security keys in Azure AD
  • Setting up the security key
  • Signing in to AVD with it

Enable the authentication method for security keys in Azure AD

Before you can start using the security key we have to enable it in AAD. If we don’t do this, you won’t have the option when you try to add the key on your account.

Go to Azure AD and select Security

Now Select “Authentication Methods”

You can see that the FIDO2 security key option is not enabled so click on it to change this

Move the slide bar to Yes and click Save. For this demo I’m putting the scope to All Users.

Now we can logon to our account and configure the security key

Setting up the security key

Before you can use the security key you need to add the key as an authentication device.

First step is to logon to your Microsoft account and click on your account

Next select “Update Info” to see your Security info

In this screen you can see your authentication methods. As you can see I already have 1 configure on my mobile device but we want to have our security key listed here.

Select the “Add Method” to start the process of adding our key

In the next windows you need to select what kind of security key you want to use. Since mine is a usb I’ll choose that one.

You will be notified to keep your key ready

I’m asked to insert my key and to touch the fingerprint sensor

Next step is to configure a pin code

Enter the name for the security key is the last step

Signing in to AVD with the security key

I open an private browser window and go the the url of AVD

https://rdweb.wvd.microsoft.com/arm/webclient/index.html

I fill in the username but instead of typing the password I select Sign in with a security key

The prompt to enter the pin code of the security comes and afterwards the ask to touch the security key.

After testing the key I can only say that it’s a great product. No more worries of mistyping your password. I’ll be using this key alot.

Leave a Reply

Your email address will not be published. Required fields are marked *