Windows serviceCNG Key Isolation

Registry Name

KeyIso

Description

The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.

Default Status

Running

Default Startup Type

Manual (Trigger Start)

Executable File Path

C:\WINDOWS\system32\lsass.exe

DLL File Path

C:\WINDOWS\system32\keyiso.dll

Dependencies

The service depends on the following system components to function properly: System components that depend on this service to function properly:

Log On As

LocalSystem

Additional Information

None at this time