Unable to detect if logged in via Windows Hello for Business with Detect-WindowsHelloEnrollment.ps1

[plambrechtsen]

If I am enrolled with Windows Hello for Business but I login with Username and Password and then I try and request a certificate using the template that enforces using the Microsoft Passport Key Storage Provider CSP.

Using

Get-Certificate -Template 'WHFB Template' -CertStoreLocation cert:\CurrentUser\My SubjectName 'cn=test'

Then I get a UAC prompt to unlock the TPM using Face / Fingerprint / Pin.

Do you know if there is a way to determine if I have unlocked the TPM / Logged in with Windows Hello for Business in Powershell to prevent the prompt from happening?