Admin Privilege requirement for FIDO2 operations.

[wuwing]

https://github.com/borrrden/Fido2Net, this link mentioned that when using the SDK on Windows, it must have admin privilege to take operations for FIDO2.
Wondering if it could work without admin privilege for cases as YubiKey FIDO2?
As the browser could work without admin, why for .Net SDK has such limitation?

[kongeo]

Hello, currently the only way to communicate with a FIDO device from an unprivileged context in Windows is through Windows Hello. libfido2 supports that and latest builds set USE_WINHELLO.

[wuwing]

Thanks for the confirmation, wondering whether it could be supported from unprivileged context in the future?
Or is there any doc explaining why having such limitation of requiring admin privilege.

[kongeo]

Sure! This is an OS limitation posed by Windows.