--- title: "Enrolling Fingerprints" slug: "enrolling-fingerprints" tags: ["Enrollment Tile wizard", "Client", "fingerprint", "enrolling"] updated: 2025-10-06T22:10:25Z published: 2025-10-06T22:10:25Z canonical: "mfa.rapididentity.com/enrolling-fingerprints" stale: true --- > ## Documentation Index > Fetch the complete documentation index at: https://mfa.rapididentity.com/llms.txt > Use this file to discover all available pages before exploring further. # Enrolling Fingerprints Fingerprints can be enrolled through the desktop or Enrollment Tile wizard. 1. In the Enrollment Wizard, click the **Fingerprint Biometrics** option. ![fp enroll 1 - EW.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/fp%20enroll%201%20-%20EW%281%29.png) 1a. If you are on the desktop application, it will ask you to re-authenticate. ![fp enroll 2 - re-auth.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/fp%20enroll%202%20-%20re-auth.png) 1. The next screen will be your finger selection. Here you can pick any finger(s) to scan. The number of fingers required for enrollment is set by administration (seen at the bottom of the window). ![fp enroll 3 - select finger.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/fp%20enroll%203%20-%20select%20finger.png) 1. Follow the on-screen prompts for each finger until you get a *Success* message, and click **Next** to save the finger you just enrolled. ![fp enroll 5 - success.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/fp%20enroll%205%20-%20success.png) 1. Once all of your fingers are enrolled, hit **Next**. ![fp enroll 6 - all done.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/fp%20enroll%206%20-%20all%20done.png) *4a.* If you are set up to use a numerical PIN, you'll be presented the following screen to create your PIN. *This PIN will be used with any finger that you use to log into or unlock a workstation with*. ![fp enroll 7 - enter pin.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/fp%20enroll%207%20-%20enter%20pin.png) 1. When complete, you'll be brought back to the main page of the Enrollment Wizard where you'll see that the light next to the fingerprint option is now green, indicating that the method is enrolled. ![fp enroll 8 - green light.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/fp%20enroll%208%20-%20green%20light.png) --- ## Additional Settings In the **Admin Portal > Policies Tab > Hardware** tab, check (✓) the box for **Allow Unauthenticated One to Many Biometric Match** and set the value to **True**. This allows users to walk up and swipe their finger without first entering a username. ![fingerprint settings.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/fingerprint%20settings.png) In the **Settings** tab, check (✓) the option **Allow Unauthenticated One-To-Many Biometric Match**. When enabled, the server compares the presented fingerprint template against the whole database of fingerprint templates and successfully authenticates if it matches. Click "Save" at the bottom of the page to confirm the change. ![fingerprint settings 2.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/fingerprint%20settings%202.png) ⚠️ This setting can cause the fingerprint's authentication to take a little longer. --- ## Troubleshooting The most frequent error that appears on the client during enrollment is "Reader is not connected": ![fp enroll - not connected.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/fp%20enroll%20-%20not%20connected.png) #### Things to check or try: - Verify that the *BioDevice* setting/registry key has been set in the MFA Policy to match the device's make; See our [registry settings article](/v1/docs/policy-and-registry-values) for all available biometric readers options - If you are using a *Digital Persona* device, you may need to install the driver onto the client computer; Download the driver [here](https://idauto.s3.us-east-1.amazonaws.com/mfa/tools/DP-UareU-WSDK-220.zip) #### Embedded Readers - Make sure the BioDevice is set to "wbf" ![fp enroll - regedit.png](https://cdn.document360.io/cf888ab6-47bb-4aaa-984b-26a47cdccf46/Images/Documentation/fp%20enroll%20-%20regedit%282%29.png) - If you are on MFA Client v4981, try rolling the client version back to an older version (this will require [uninstalling the current client software](/v1/docs/uninstall-the-mfa-client) and installing an older one) - Recommended versions: [4.9.3.9](https://idauto.s3.us-east-1.amazonaws.com/mfa/client/4941+and+lower/RapidIdentity_Client_v4939.exe), [4.9.4.1](/v1/docs/4941-client-release-notes), [4.9.6.1](/v1/docs/4961-client-release-notes)