What is "CNG Key Isolation" in my Windows 7 service list? And how is "CNG Key Isolation" service related to KeyIso.dll?

"CNG Key Isolation" is a Windows 7 service that "The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements." "CNG Key Isolation" service is provided by KeyIso.dll DLL file.

Detailed information on "CNG Key Isolation" service:

Service name: KeyIso
Display name: CNG Key Isolation
Execution command: C:\Windows\system32\svchost.exe -k netsvcs
Start type: Manual
Service status: Started
Dependencies:
   Remote Procedure Call (RPC)

"CNG Key Isolation" service is provided by a DLL file called: KeyIso.dll:

Name: KeyIso.dll
Location: C:\Windows\System32\KeyIso.dll
Description: CNG Key Isolation Service
File version: 6.1.7601.16385
Size: 19.0 KB (19,456 bytes)
Modified: Monday, July 13, 2009, 9:15:35 PM

Disabling "CNG Key Isolation" service may cause issues when running Windows 7 system.

⇒ "Computer Browser - Browser.dll" Service on Windows 7

⇐ "Certificate Propagation - certprop.dll" Service on Windows 7

⇑ 'svchost.exe -k netsvcs' Services on Windows 7

⇑⇑ Windows 7 Services Tutorials