Computer step by step
 Make your Pc better
How to Start/Stop
CNG Key Isolation service
Description Services Regedit Back CMD Msconfig
Service name: KeyIso
Display name: CNG Key Isolation

Description:
The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to
private keys and associated cryptographic operations as required by the Common Criteria. The service stores
and uses long-lived keys in a secure process complying with Common Criteria requirements.

Path to executable:
C:\Windows\system32\lsass.exe
Type services.msc and press Enter
Services.msc:
This method shows you how to Start/Stop CNG Key Isolation from Services.msc
Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
Locate CNG Key Isolation observe his current status and open to make changes.
From General tab you can Start/Stop and change the Startup type of CNG Key Isolation

To finish press ok button and close Services window
Type regedit and press Enter
Please confirm User Account Control pop-up
Microsoft official disclaimer

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by
using another method. These problems might require that you reinstall the operating system. Microsoft
cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Please navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\KeyIso and
locate Start registry key
Regedit:          
This method shows you how to change Startup type of CNG Key Isolation from Registry
Editor.
Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
   
Type cmd, right click on cmd icon under the Programs and click on Run as administrator
Please confirm User Account Control pop-up
Please select, right and copy a registry key from below, then right click on command prompt window
, select Paste and press Enter

To Start CNG Key Isolation:

net start KeyIso

Note: You can’t start a service if Startup type is on Disabled.

To Stop CNG Key Isolation:

net stop KeyIso

To change Startup type:

Automatic:
REG add "HKLM\SYSTEM\CurrentControlSet\services\KeyIso" /v Start /t REG_DWORD /d 2 /f

Manual:
REG add "HKLM\SYSTEM\CurrentControlSet\services\KeyIso" /v Start /t REG_DWORD /d 3 /f

Disabled:
REG add "HKLM\SYSTEM\CurrentControlSet\services\KeyIso" /v Start /t REG_DWORD /d 4 /f

Automatic (Delayed Start):
REG add "HKLM\SYSTEM\CurrentControlSet\services\KeyIso" /v Start /t REG_DWORD /d 2 /f

Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.
REG add "HKLM\SYSTEM\CurrentControlSet\services\KeyIso" /v DelayedAutostart /t REG_DWORD /d 1 /f

When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.
REG add "HKLM\SYSTEM\CurrentControlSet\services\KeyIso" /v DelayedAutostart /t REG_DWORD /d 0 /f
CMD:          
This method shows you how to Start/Stop and change Startup type of CNG Key Isolation
from Command Prompt
Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
Msconfig:          
This method shows you how to prevent CNG Key Isolation service from starting with the
operating system using System Configuration (msconfig.exe)
Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
Write msconfig and press Enter
In System Configuration please go to Services tab and locate CNG Key Isolation. Uncheck
the box to prevent this service to start and then press OK to finish.  
Any change make in System Configuration will be apply after restart.  
Up Back
   
   
Double click on Start and edit the value:

Change Startup type :

Automatic - 2
Manual - 3
Disabled - 4
Automatic (Delayed Start) - 2

Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.
When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.