Process: KeyIso service (CNG Key Isolation)
from 
Stardock Forums
Stardock Forums
KeyIso service - General Information
Name:
KeyIso service (CNG Key Isolation)
Publisher
Microsoft Corporation
Product:
Microsoft® Windows® Operating System
Default location:
%windir%\system32\lsass.exe
KeyIso service - Description and Recommendation
The CNG key isolation service is hosted in the LSA process. The service provides key process isolation to private keys and associated cryptographic operations as required by the Common Criteria. The service stores and uses long-lived keys in a secure process complying with Common Criteria requirements. It should not normally be disabled, as otherwise such cryptographic operations may fail.
KeyIso service - Uninstall Techniques