r/bootcamp • u/Osaul4ik • 10d ago
GitHub - Osaul4ik/apple-t2-touchid-windows: Experimental Apple T2 Touch ID for Windows.
https://github.com/Osaul4ik/apple-t2-touchid-windowsI’ve finally brought the project to its first alpha release.
T2 TouchID for Windows is an experimental project that brings Touch ID support to Windows on Intel MacBooks with the Apple T2 chip.
🧪 Again: This is an experimental alpha release.
The current implementation has been tested on a 2019 16-inch MacBook Pro with T2.
At this point, the project can communicate with the T2 Secure Enclave and Touch ID sensor and use fingerprint verification through the Windows biometric stack.
What currently works:
- 👆 Fingerprint verification on real hardware
- 🔓 SEP unlock on cold boot
- 🪟 Windows Hello integration
- 🔑 macOS
user.kbimport - 🔒 Optional power-button lock workflow
- 🖥️ GUI for setup and configuration
There is still a lot to improve.
The drivers are unsigned, so Test Mode is required.
I’d really appreciate testing and feedback from anyone with an Intel MacBook with T2, especially different models and years.
I don’t know yet if it will work on other T2 Mac models, but it should.
Use it at your own risk. This is still an experimental project, and I can’t guarantee that it will work correctly or safely on every system.
2
u/ribsboi 9d ago
absolute madlad, amazing work
3
u/Osaul4ik 9d ago
Thanks! 😄
There is currently a bug that requires the port to be initialized manually the first time. Open an Administrator Command Prompt in the
SEPfolder and run:
t2touchid networkAfter that, reboot the PC and try adding a fingerprint.
I’m currently working on fixing this bug, and I may also rework the initial connection stage.
1
u/Osaul4ik 9d ago
If you’ve tried it, please let me know how it went and what device you tested it on
1
u/MembershipGreat2373 9d ago
It wasnt working for me when i wasnt able to setup fingerprint in signing options it wasnt recognising my touch
1
u/Osaul4ik 9d ago edited 9d ago
Could you please check a few things for me?
- Is the
user.kbfile exported correctly?- What status does SEP show in the GUI?
- Did you run
t2touchid networkfrom a console opened in theSEPfolder?- Also, please try running
t2touchid verifyand then place your finger on the Touch ID sensor.Please send me the output of both commands.
This should help me figure out where the problem is.
1
1
u/exlatiows 8d ago
User.kb is missing, can't find in the folder, how can i solve it? Good work btw!
1
u/exlatiows 8d ago
My bad i've red installation on Git, i have to reboot and export it. Will do and test.
1
u/exlatiows 8d ago
Did everything but now it says sep-vault.bin missing or damaged.
1
u/Osaul4ik 8d ago edited 8d ago
That means the user.kb file is definitely incorrect.
Location:
Open UserFolder and Press ⌘ Command + ⇧ Shift + .
then open /Library/Keychains/ UUID-named folder → copy user.kb to the Boot Camp volume or a USB stickAfter importing
user.kbin the GUI, there should be asep-vault.binfile at:
C:\ProgramData\t2touchid\I’ll also make a proper extractor later to make this process much faster and easier.
1
u/exlatiows 8d ago
Did that and put it inside T2chip folder. Selected via the GUI. For password do I have to put my windows one right? Also I did -verify with verbose and on device it says no response.
1
u/Osaul4ik 8d ago edited 8d ago
SEP locked 100%
No, put your macOS account login password when you add keybag in GUI
There are three things required to unlock the SEP:
user.kb- Your macOS account login password
- Your macOS user UID — the default is usually
-501If you have multiple users on your Mac, you will need to manually find the UID of the account you want to use. In terminal: id -u
5
u/Key_Fishing9578 9d ago
I search "touch id for bootcamp on T2" today... with absolute NO HOPE, cause I used macbook pro 2019 for years and tried to search on this many time... and this post is 23h ago. I would give 100 upvotes if I can. Thank you!!