Pre-Boot Authentication (PBA) is a security measure that occurs before the operating system starts. It ensures that only authorized users can boot the system.

Windows Hello is Microsoft’s modern authentication framework that supports:

- PIN, Face recognition, Fingerprint login

Important: Windows Hello only works after Windows has started. It's part of the Windows login process, not pre-boot.

Windows Hello is a post-boot authentication mechanism.

PBA takes place before the OS loads, often in a custom mini-OS or bootloader from security vendors.

This means Windows Hello cannot be used in traditional PBA environments, unless a vendor mimics its behavior (e.g., using a similar PIN mechanism).

Windows Hello cannot be directly integrated into traditional PBA because it is tied to Windows.

What is possible: PIN-based authentication in the PBA, similar to Windows Hello, but not using its APIs.

What I would find more interesting is MFA with an authenticator app (i.e., displaying a QR code in the PBA to scan and store in the authenticator).

As this approach isn’t currently feasible, I will close the request. Many thanks for your understanding.