What is the CNG Key Isolation (KeyIso) service?

An explanation of the CNG Key Isolation (KeyIso) service in Windows 7.

What does the CNG Key Isolation (KeyIso) service do?

The CNG (Cryptographic Next Generation) key isolation service is responsible for storing the keys for cryptographic information in a secure place. For example; the CNG service would store a wireless network’s key, or cryptographic information for a smart card.

CNG Key Isolation (KeyIso) service details

  • Service name: KeyIso
  • Description: The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.
  • Path to executable: C:\windows\system32\lsass.exe
  • Startup type: Manual

Does my computer need the CNG Key Isolation (KeyIso) service?

Yes your computer needs this service to stop cryptographic information securely.

Should I disable the CNG Key Isolation (KeyIso) service?

First off, I have to say that it’s best to leave service optimization up to Microsoft. With that said; leave this service alone and let Windows determine if it should run or not.

Still need help? Ask your computer question now.

Related Guides:

2 Responses to “What is the CNG Key Isolation (KeyIso) service?”

Subscribe to this guide's comments RSS feed.

  1. Faisal Chowdhury says:

    I turned of this service(Windows 7 starter) from msconfig then Wi-Fi was disable, I could not turned on Wi-Fi manually from OS. Then I turned on this service back and Wi-Fi turned on by itself. So I think this service must be marked as ON.
    Thanks

  2. Fred Scott says:

    Does my computer need the CNG Key Isolation (KeyIso) service?
    Yes your computer needs this service to stop cryptographic information securely.

    Is there a typo in your reply, above? Do you mean “to store cryptographic information”?

Leave a Reply

You must be logged in to post a comment.

Microsoft Windows is a registered trademark of Microsoft Corporation. Microsoft Corporation in no way endorses or is affiliated with MAXIMUMpcguides.com. All other products mentioned are registered trademarks of their respective companies. MAXIMUMpcguides IS NOT RESPONSIBLE for any damage or data loss to your computer from using this web site. All information on MAXIMUMpcguides is provided on an AS IS basis with NO WARRANTIES.

Copyright 2006-2014 Brent Trahan. All rights reserved.