> Source: [sk165415](https://support.checkpoint.com/results/sk/sk165415)

# sk165415 - FDE Stuck at "User Acquisition" with Cisco DUO MFA Installed

| Property | Value |
|----------|-------|
| Solution ID | sk165415 |
| Date Created | 2020-02-24 |
| Last Modified | 2023-07-28 |
| Technical Level | General |
| Products | Endpoint Security |
| Versions | Cloud, E89.X, E88.X |
| OS | Windows |

## Symptoms

- * FDE Stuck at "User Acquisition" with Cisco DUO MFA Installed.
* FDE Blade will not start the encryption process.

## Cause

The problem that comes into play here is that Windows GINA is no longer used as it was in Windows XP, Windows Vista and Windows 7.   

Starting with Windows 10, a new method called Credential Provider(s) is used to control stored and used credentials. Our FDE Blade has supported Credential Provider for quite some time. Refer to [sk118817](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk118817) and [sk152915](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk152915).  

With that said, Duo does not claim support for wrapping/chaining their Credential Provider.   

See Duo's answer to the question directly below, or refer to the following URL: <https://duo.com/docs/rdp-faq>  
**Does Duo Authentication for Windows Logon work with Third-Party Disk Encryption Software or other Credential Providers?**  
*"Duo's Credential Provider cannot be chained with other Credential Providers present on your system. Disk Encryption Software that stores the Windows user name and password provided before boot may no longer use those credentials to automatically log on to Windows."*

If wrapping does not work, or is not allowed, the functionality provided by our FDE Credential Provider will be lost (User Acquisition, password sync, etc...).   

<br />

## Solution

**This is not a Check Point issue.**   
Since Duo does not support wrapping Third-Party Credential Providers and being wrapped by Third-Party Credential Providers, it is best for the customer to open a case with Duo to check if support for wrapping/chaining can be added, or get a more detailed answer from Duo as to why their Credential Provider cannot wrap, and or be wrapped.

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content