CNG Key Isolation - KeyIso

Grab the ENTIRE 4 Part Guide HERE:   Windows Services Guide - $9.97

Below is a description of this Windows Vista service:

The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.

# Default Settings:

Default setting in Windows Vista Home Basic is: Manual
Default setting in Windows Vista Home Premium is: Manual
Default setting in Windows Vista Business is: Manual
Default setting in Windows Vista Ultimate is: Manual

# This Windows service logs on as:

Local System

# The default path for this Windows service is:

%systemroot%\system32\lsass.exe

# This Windows service depends on the following system components:

Remote Procedure Call (RPC) > DCOM Server Process Launcher

# The following services have a dependency on this service:

Extensible Authentication Protocol > Wired AutoConfig

Extensible Authentication Protocol > WLAN AutoConfig

Marc Says:

Basically CNG stands for Cryptographic Next Generation and deals with cryptographic information in Vista. This service allows programs to add new algorithms, or substitute their own algorithm providers in place of existing providers.

The CNG Key Isolation service stores the keys for this cryptographic information.