.      How to articles       Windows Services       Group Policy             Donate        
Computer step by step

How to Start/Stop CNG Key Isolation service

Service name: KeyIso

Display name: CNG Key Isolation


Description:

The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated
cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process
complying with Common Criteria requirements.

Path to executable:

C:\WINDOWS\system32\lsass.exe

Services Regedit CMD Msconfig

Msconfig:
This method shows you how to Start/Stop CNG Key Isolation service from starting with the operating system using
System Configuration

Perform the following steps:

Please go to Start and click on the Type here to search

Type msconfig and press Enter

In System Configuration please go to Services tab and locate CNG Key Isolation service
Uncheck the box to prevent this service to start and then press OK to finish

Any change make in System Configuration will be apply after restart