To help others, the following sets out the steps I used to implement FDE on my Windows 10 computer with a YubiKey 4. This is partly based on a YubiCo forums post but includes more information. My system uses the following: A mainboard with a Trusted Platform Module (TPM) chip; Windows 10 Pro (build 1703) YubiKey 4 and the YubiKey

(Working) Windows Hello for Business Yubikey Login May 08, 2020 Duo Authentication for Windows Logon and RDP | Duo Security Jul 13, 2020 Strong Authentication in Active Directory Using a YubiKey Mar 26, 2018

In Windows build 1903, FIDO2 could now be used to verify/login to a windows account. The 'Security Key by Yubico' supports FIDO2 according the product page, however this page says that it is unsupported. However that page features the yubikey 4 as their flagship.

Windows Hello authentication is tied to the device; the user needs both the device and a sign-in component such as a PIN or biometric factor to access corporate resources. Sign in using a mobile phone with fingerprint scan, facial or iris recognition, or PIN.

The Yubikey is a small USB connected hardware device that can generate a variety of security codes. Being virtually indestructible and easy to clip to a key ring (Yubikey 4) or leave inside your only device (Yubikey 4 Nano) you can now use this token to login to Windows.

A Yubikey physical key is something you keep on your person. When you login to a website and are prompted, you put the key in the USB socket, and press the button when it lights up. If someone got your password from a breach, they'll be prompted for the Yubikey and they will be stymied. To help others, the following sets out the steps I used to implement FDE on my Windows 10 computer with a YubiKey 4. This is partly based on a YubiCo forums post but includes more information. My system uses the following: A mainboard with a Trusted Platform Module (TPM) chip; Windows 10 Pro (build 1703) YubiKey 4 and the YubiKey Yubico demo website