Start
About
FAQ
Blogroll
Shop
As the name suggests, CNG (Cryptographic Next Generation) deals with cryptographic information, allowing programs to add new algorithms, or substitute their own algorithm providers in place of existing providers. The CNG Key Isolation service stores the keys for this cryptographic information. For details on the CNG Key Isolation architecture, see this article.
Features like Network Auto Configuration and Smart Cards rely on this service, but it could extend to third-party applications that use cryptography as well. Because it’s hard to predict what features, or programs might need this service, it’s best to leave it enabled, and since it’s set to manual by default, you won’t gain anything by disabling it.
Display Name:
CNG Key Isolation
Service Name:
KeyIso
Process Name:
lsass.exe
Description:
The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements.
Path to Executable:
%windir%\system32\lsass.exe
Default Startup:
- Home Basic: Manual
- Home Premium: Manual
- Business: Manual
- Enterprise: Manual
- Ultimate: Manual
Log On As:
Local System Account
Desktop Interaction:
No
Depends On:
- Remote Procedure Call (RPC)
- DCOM Server Process Launcher
Required For:
- Extensible Authentication Protocol
- Wired AutoConfig
- WLAN AutoConfig
Memory:
N/A
CPU:
N/A
Do you know something about this service that I don't? Please leave a comment below so I, and everyone else reading this, can benefit from your knowledge!
Digg
Mixx
Propeller
Slashdot
Stumble
Tips and Tricks
Windows Updates
Hotfixes
Keyboard Shortcuts
Vista's Services
Vista's Commands
Product Reviews
Glossary
Videos
Web Links
Comments
Ahmad Lafi
Apr 27, 2007 at 12:56 pm
I have Windows Vista installed on my laptop. And usually I connect to it an external USB hard drive for backup and data transfer operations. When I try to safely eject the hard drive I get the message: Windows can’t stop your ‘Generic volume’ device because a program is still using it… First I thought it was the antivirus or the Windows Search service, but finally in turned out that the CNG service is behind this, once stoping it, I can smoothly eject my hard drive.
Joe
Apr 27, 2007 at 1:58 pm
Wow, I never would have suspected that. Good job tracking it down, and thanks for letting us know!
Rick Dillman
May 4, 2007 at 9:58 am
I am working on a customers laptop, a Pavilion dv6000. The wireless network card cannot detect any network. WLan autoconfig sevice is not running and I have narrowed the problem to the KeyIso service. In the services mmc it says in the description, Failed to read description Error Code: 2 , The keyIso.dll file is 0bytes. Is there any way to restore this file?
Garrett Collier
Jul 9, 2007 at 5:48 pm
I am having a similar problem with a windows vista home machine. I, however, have a 20k file and a wireless connection that unexpectedly stopped this morning. ALSO, when I attempt to restore the machine, it displays an error telling me that it could not restore the sys. Further more, each time I try to start the WLAN AutoConfig, it fails about an 1/8 of the way into the startup and gives an error. Rick, did you ever find a solution to your problem?
Sanjib Kumar Biswas
Sep 14, 2007 at 2:28 pm
I am also using the Windows Vista business and facing the problem with ejection of USB. I am getting the message “Windows can’t stop ‘Generic Volume’ device because it is in use.
Close any programs or windows that might be using the device,
and then try again later.”
How to solve this problem???
Plz suggest.
steven
Sep 29, 2007 at 6:00 am
I am having a similar problem with a windows vista home machine. Usually I connect to it an external USB hard drive for backup and data transfer operations. When I try to safely eject the hard drive I get the message: Windows can’t stop your ‘Generic volume’ device because usually I connect to it an external USB hard drive for backup and data transfer operations. When I try to safely eject the hard drive I get the message: “Windows can’t stop your ‘Generic volume’ device because it is in use. Close any programs or windows that might be using the device,and then try again later.â€?
Would u plz tell how to solve the problem.
Thank’s a lot..
Von
Dec 13, 2007 at 1:52 pm
Hi All
How do I stop the CNG? Will I need to do this action everytime I want to use my exteral hard drive?
Reddoxster
Dec 14, 2007 at 10:53 pm
@Von:
To stop the CNG-
Easy way:
1. Type the following in the Run dialog (press windows key+R to open Run):
“net stop KeyIso” (without quotes).
2. If it asks you for permission, click yes.
3. A DOS window’l open up now. type “y” (again, no quotes) and click enter.
Oh and stopping the service is NOT recommended if you use wireless networks.
The not so easy way:
1. In Run type “Services.msc”.
2. Search for “CNG Key Isolation” in the first column.
3. Double click on that row.
4. Select Stop.
5. Your done.
Ryan
Dec 24, 2007 at 9:54 am
I am using a San Disc memory card and downloading files onto it. When I press “Safely Remove,” the popup “Windows can’t stop your “Generic Volume” device” comes up. At first I thought to close all windows and applications, but this did nothing at all. What is this “Generic Volume” device and how do I stop this problem?
Planet Lowyat
Dec 26, 2007 at 3:35 am
I have the similar problem but my CNG is not started. I’m stil looking for best solution.
MrM
Mar 3, 2008 at 2:46 pm
@Von:
To stop the CNG-
And a third way… (isn’t Microsoft sooo cute)… You can kill the process (PID) by doing the following: First open the MSDOS command line, then type TASKLIST. This will show you all of the active processes and their PID’s. Next type taskkill /PID xxx (where xxx is the PID#).
Joe
Mar 3, 2008 at 2:52 pm
Note that the ‘net stop’ method and the ‘taskkill’ method only stop the service/process for the current session you are in. When you reboot, it will be back again.
Leave a Comment