<?xml version="1.0" encoding="utf-8" standalone="yes"?>
<assembly xmlns="urn:schemas-microsoft-com:asm.v3" manifestVersion="1.0" copyright="Copyright (c) Microsoft Corporation. All Rights Reserved.">
  <assemblyIdentity name="Microsoft-Windows-Analog-FaceRecognitionCredentialProvider" version="10.0.26100.8521" processorArchitecture="amd64" language="neutral" buildType="release" publicKeyToken="31bf3856ad364e35" versionScope="nonSxS" />
  <file name="facecredentialprovider.dll" destinationPath="$(runtime.system32)\" sourceName="facecredentialprovider.dll" importPath="$(build.nttree)\Analog\face\product\credprov\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>U3SgejX0IKYnw+Ab4gddnG17EalmS0++Cy2r0wTdHnk=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="@WindowsHelloFaceToastIcon.png" destinationPath="$(runtime.system32)\" sourceName="WindowsHelloFaceToastIcon.png" importPath="$(build.nttree)\Analog\face\product\credprov\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>FI8WCDWYm3IM/yp4KlzYs2reHR8XgcVUpcB3WViQQGs=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="@facial-recognition-windows-hello.gif" destinationPath="$(runtime.system32)\" sourceName="facial-recognition-windows-hello.gif" importPath="$(build.nttree)\Analog\face\product\credprov\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>W/5yVJwgpIOGbPTkN9EZ8RoOAveEf5gpqyrhATeua+s=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="@WindowsHelloFaceToastIconRejuv.png" destinationPath="$(runtime.system32)\" sourceName="WindowsHelloFaceToastIconRejuv.png" importPath="$(build.nttree)\Analog\face\product\credprov\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>Q6yKFdmsavMANJpOCln9LWHmXApdD+x654SXt1YVURI=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <file name="@facial-recognition-windows-hello-rejuv.gif" destinationPath="$(runtime.system32)\" sourceName="facial-recognition-windows-hello-rejuv.gif" importPath="$(build.nttree)\Analog\face\product\credprov\" sourcePath=".\">
    <securityDescriptor name="WRP_FILE_DEFAULT_SDDL" />
    <asmv2:hash xmlns:asmv2="urn:schemas-microsoft-com:asm.v2" xmlns:dsig="http://www.w3.org/2000/09/xmldsig#">
      <dsig:Transforms>
        <dsig:Transform Algorithm="urn:schemas-microsoft-com:HashTransforms.Identity" />
      </dsig:Transforms>
      <dsig:DigestMethod Algorithm="http://www.w3.org/2000/09/xmldsig#sha256" />
      <dsig:DigestValue>+wfoyAItJY/QrNh8D07DWUu0U1doqzRxQCuutqVS0O8=</dsig:DigestValue>
    </asmv2:hash>
  </file>
  <registryKeys>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{8AF662BF-65A0-4D0A-A540-A338A999D36F}">
      <registryValue name="" valueType="REG_SZ" value="FaceCredentialProvider" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\CLSID\{8AF662BF-65A0-4D0A-A540-A338A999D36F}\InprocServer32">
      <registryValue name="" valueType="REG_SZ" value="$(runtime.system32)\FaceCredentialProvider.dll" />
      <registryValue name="ThreadingModel" valueType="REG_SZ" value="Apartment" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers\{8AF662BF-65A0-4D0A-A540-A338A999D36F}">
      <registryValue name="" valueType="REG_SZ" value="FaceCredentialProvider" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon">
      <securityDescriptor name="WRP_REGKEY_FACE_LOGONUI_SDDL" />
      <registryValue name="UserSwitchEnabled" valueType="REG_DWORD" value="0x00000000" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon\S-1-1-0">
      <securityDescriptor name="ADMIN_FULL_ACCESS_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogonEnrolledUsers">
      <securityDescriptor name="WRP_REGKEY_FACE_LOGONUI_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\Analog\OneSettings">
      <securityDescriptor name="WRP_REGKEY_HELLO_FACE_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\Analog\FaceDeviceInfo">
      <securityDescriptor name="WRP_REGKEY_HELLO_FACE_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PushNotifications\Applications\Windows.SystemToast.HelloFace">
      <registryValue name="Capabilities" valueType="REG_DWORD" value="0x000024FF" />
      <registryValue name="ApplicationType" valueType="REG_DWORD" value="0x40000000" />
      <registryValue name="PackageMoniker" valueType="REG_SZ" value="System" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
    <registryKey keyName="HKEY_CLASSES_ROOT\AppUserModelId\Windows.SystemToast.HelloFace">
      <registryValue name="DisplayName" valueType="REG_EXPAND_SZ" value="@%SystemRoot%\system32\facecredentialprovider.dll,-5" />
      <registryValue name="IconBackgroundColor" valueType="REG_SZ" value="00000000" />
      <registryValue name="CustomActivator" valueType="REG_SZ" value="{A1C65850-EE98-45B0-B6A0-BB1506949890}" />
      <securityDescriptor name="WRP_REGKEY_DEFAULT_SDDL" />
    </registryKey>
  </registryKeys>
  <migration scope="Upgrade" settingsVersion="2">
    <machineSpecific>
      <migXml xmlns="">
        <rules context="system">
          <include>
            <objectSet>
              <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon\* [*]</pattern>
              <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogonEnrolledUsers\* [*]</pattern>
            </objectSet>
          </include>
          <contentModify script="MigXmlHelper.SetValueByTable('1,2','0,0','0')">
            <objectSet>
              <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon [CreateEnrollmentPromptCount]</pattern>
            </objectSet>
          </contentModify>
          <contentModify script="MigXmlHelper.SetValueByTable('1,2,3,4,5','0,0,0,0,0','0')">
            <objectSet>
              <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon [CredProvUncompletedInstances]</pattern>
            </objectSet>
          </contentModify>
          <contentModify script="MigXmlHelper.SetValueByTable('0','0','0')">
            <objectSet>
              <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogonEnrolledUsers [S-1-5-21-*]</pattern>
            </objectSet>
          </contentModify>
          <merge script="MigXmlHelper.SourcePriority()">
            <objectSet>
              <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon\* [*]</pattern>
              <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogonEnrolledUsers\* [*]</pattern>
            </objectSet>
          </merge>
        </rules>
      </migXml>
    </machineSpecific>
    <supportedComponents>
      <supportedComponent>
        <assemblyIdentity name="_" version="1.0.0.0" />
        <supportedComponentIdentity language="neutral" name="Microsoft-Windows-Analog-FaceRecognitionCredentialProvider" processorArchitecture="*" settingsVersionRange="2" xmlns="urn:schemas-microsoft-com:asm.v3" />
        <machineSpecific>
          <migXml xmlns="">
            <rules context="system">
              <destinationCleanup>
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon [DeviceNotCapableFirstSeenDate]</pattern>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon [DeviceNotCapableCount]</pattern>
                </objectSet>
              </destinationCleanup>
              <include>
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon\* [*]</pattern>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogonEnrolledUsers\* [*]</pattern>
                </objectSet>
              </include>
              <contentModify script="MigXmlHelper.SetValueByTable('1,2','0,0','0')">
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon [CreateEnrollmentPromptCount]</pattern>
                </objectSet>
              </contentModify>
              <contentModify script="MigXmlHelper.SetValueByTable('1,2,3,4,5','0,0,0,0,0','0')">
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon [CredProvUncompletedInstances]</pattern>
                </objectSet>
              </contentModify>
              <contentModify script="MigXmlHelper.SetValueByTable('0','0','0')">
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogonEnrolledUsers [S-1-5-21-*]</pattern>
                </objectSet>
              </contentModify>
              <merge script="MigXmlHelper.SourcePriority()">
                <objectSet>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogon\* [*]</pattern>
                  <pattern type="Registry">HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\FaceLogonEnrolledUsers\* [*]</pattern>
                </objectSet>
              </merge>
            </rules>
          </migXml>
        </machineSpecific>
      </supportedComponent>
    </supportedComponents>
  </migration>
  <dependency discoverable="no" resourceType="Resources">
    <dependentAssembly>
      <assemblyIdentity name="Microsoft-Windows-Analog-FaceRecognitionCredentialProvider.Resources" version="10.0.26100.8521" processorArchitecture="amd64" language="*" buildType="release" publicKeyToken="31bf3856ad364e35" />
    </dependentAssembly>
  </dependency>
  <localization>
    <resources culture="en-US">
      <stringTable>
        <string id="displayName" value="Face Recognition Credential Provider" />
        <string id="description" value="Face Recognition Credential Provider DLL" />
      </stringTable>
    </resources>
  </localization>
  <trustInfo>
    <security>
      <accessControl>
        <securityDescriptorDefinitions>
          <securityDescriptorDefinition name="WRP_REGKEY_FACE_LOGONUI_SDDL" sddl="D:(A;CIOI;KRKW;;;CO)(A;CIOI;KA;;;SY)(A;CIOI;KA;;;BA)(A;CIOI;KR;;;AC)(A;CIOI;KR;;;IU)(A;CIOINP;KW;;;IU)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_REGKEY_HELLO_FACE_SDDL" sddl="O:SYG:SYD:(XA;CIOI;KA;;;S-1-15-3-1024-1730716382-2949791265-2036182297-688374192-553408039-4133924312-4201181712-267922143;(!(WIN://ISMULTISESSIONSKU)))(XA;CIOI;KA;;;BU;(!(WIN://ISMULTISESSIONSKU)))" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_REGKEY_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;CI;GA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;CI;GR;;;SY)(A;CI;GR;;;BA)(A;CI;GR;;;BU)(A;CI;GR;;;S-1-15-2-1)(A;CI;GR;;;S-1-15-3-1024-1065365936-1281604716-3511738428-1654721687-432734479-3232135806-4053264122-3456934681)" operationHint="replace" />
          <securityDescriptorDefinition name="ADMIN_FULL_ACCESS_SDDL" sddl="O:BAG:SYD:(A;;GA;;;BA)(A;;GA;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)" operationHint="replace" />
          <securityDescriptorDefinition name="WRP_FILE_DEFAULT_SDDL" sddl="O:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464G:S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464D:P(A;;FA;;;S-1-5-80-956008885-3418522649-1831038044-1853292631-2271478464)(A;;GRGX;;;BA)(A;;GRGX;;;SY)(A;;GRGX;;;BU)(A;;GRGX;;;S-1-15-2-1)(A;;GRGX;;;S-1-15-2-2)S:(AU;FASA;0x000D0116;;;WD)" operationHint="replace" />
        </securityDescriptorDefinitions>
      </accessControl>
    </security>
  </trustInfo>
</assembly>