Windows 10: Windows Hello For Business - Unable to set PIN , Error Event id 324 Token provider error...

Unable to set PIN , Error Event id 324 Token provider error code 0x80090016I have integrated WHFB Key Trust and Cert trust methods in different domain. Created Hyper client VM and trying to set PIN, however client machine I am able to set PIN via key trust, but when I try to set PIN with Cert Trust, user is receiving the error code 0x80090016- Keyset does not exist.

:)

 

EVENT ERROR provisioning-diagnostics-provider ID 12

Go through and do what is suggested at EVENT ERROR provisioning-diagnostics-provider Fehler ID 12. Everything you need is in that link.

 

EVENT ERROR provisioning-diagnostics-provider ID 12

Hallo,
the errors that are described there I have not or already solved some time ago, so unfortunately I can not apply any solutions. The strange thing is that the error has not occurred so far, probably because I left windows for a long time and the automatic maintenance repaired the error itself.
I will report back for new problems.
Best Regards *Smile

 

Windows Hello for Business, Device Registration Event 324 "Unable to get a token using the Web Account Manager"

Hi Windows community,

I'm setting up a POC for WHfB using the "On-premises Certificate-Based" configuration, with a Azure MFA server. I am using normal boring AD,

I've received Event 358, which says "Windows Hello for Business provisioning will be launched", and when a user logs in, it asks for a fingerprint, and successfully brings up the "Your organization requires Windows Hello" screen to set your pin, and the
white box, which says "For security reasons, we require additional information to verify your account" pops up, giving you MFA options appears.

However, clicking on either of these options throws an error-- the "Azure Multi Factor Authentication" method just says "An error occured" and the other option "Azure Multi Factor Authentication" throws "An error occured. The selected authentication method
is not available for *** Email address is removed for privacy ***. Choose another authentication method or contact your system administrator for details".

Neither method works, so "Something went wrong" pops up on the next screen, and it shows the error code: 0x801C044F. I looked up this code to no avail.

I'm looking for some direction here-- ADFS works, device registration works, testing MFA works (it sends a text message), the MFA portal works, MFA can communicate with ADFS, MFA server syncs properly with normal AD.

My best guesses are:

1. Bad ADFS -> MFA configuration.

2. Silent certificate errors

3. Poor ADFS configuration

What is confusing is that NOWHERE in the WHfB documentation are Web tokens mentioned. I'm aware that Oauth 2.0 is an option for MFA, but I never configured this. Maybe this is a failed MFA configuration?

Thanks for any help,

b