A method and an apparatus for implementing logging on of hardware to windows system with version 10 or higher, including: obtaining, by a computer, a first data package according to a registration index corresponding to a device identification of a hardware device when monitoring insertion of the hardware device, encrypting first data package to obtain first encrypted result using first encryption key stored and sending the first encrypted result and the registration index to the hardware device for verifying; when verifying successful, generating third encryption value and fourth encryption value according to second device key stored corresponding to registration index and third random number and second session random number in first encrypted result, encrypting third encryption value and fourth encryption value to obtain second encrypted result using second encryption key, and sending second encrypted result to the computer for verifying; permitting logon when verifying is successful, otherwise refusing logon.