An explanation of the CNG Key Isolation (KeyIso) service in Windows 7.
What does the CNG Key Isolation (KeyIso) service do?
The CNG (Cryptographic Next Generation) key isolation service is responsible for storing the keys for cryptographic information in a secure place. For example; the CNG service would store a wireless network’s key, or cryptographic information for a smart card.
CNG Key Isolation (KeyIso) service details
- Service name: KeyIso
- Description: The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.
- Path to executable:
C:\windows\system32\lsass.exe - Startup type: Manual
Does my computer need the CNG Key Isolation (KeyIso) service?
Yes your computer needs this service to stop cryptographic information securely.
Should I disable the CNG Key Isolation (KeyIso) service?
First off, I have to say that it’s best to leave service optimization up to Microsoft. With that said; leave this service alone and let Windows determine if it should run or not.
Still need help? Ask your computer question now.
I turned of this service(Windows 7 starter) from msconfig then Wi-Fi was disable, I could not turned on Wi-Fi manually from OS. Then I turned on this service back and Wi-Fi turned on by itself. So I think this service must be marked as ON.
Thanks