Cryptographic Services

 

General Information

Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is disabled. This service is required for Windows Update to function in automatic mode. Windows Media Player and future .NET and Live applications may also require this service for some “features” to function.

Windows 8

Default Description

Provides three management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Additional Information

None at this time.

Default Startup Type

OS SP0
Windows 8 x86 Automatic (Started)
Windows 8 x64 Automatic (Started)
Windows 8 Pro x86 Automatic (Started)
Windows 8 Pro x64 Automatic (Started)
Windows 8 Enterprise x86 Automatic (Started)
Windows 8 Enterprise x64 Automatic (Started)

Service Names

Service Name (registry): CryptSvc
Display Name: Cryptographic Services

Default Path and Command Line Options

C:\Windows\system32\svchost.exe -k NetworkService

Log On As

Account: Network Service

Dependencies

Note: No dependencies are listed for any service in the WDP build I used to draft this information.

Windows 7

Default Description

Provides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Additional Information

Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is disabled. This service is required for Windows Update to function in manual and automatic mode. Windows Media Player and future .NET and Live applications may also require this service for some “features” to function.

Automatic Updates still requires Windows Update, <strong >Cryptographic Services, Background Intelligent Transfer Service, and Windows Event Log to be running. Place all four in automatic if you do not wish to update manually. In addition, I recommend that you change the default time of 3 AM, for the automatic checking of updates, to a time when the system is “normally” on. Otherwise, Windows Update will check upon boot which may slow down the boot process.

Default Startup Type

OS SP0 SP1
Windows 7 Starter Automatic (Started) Automatic (Started)
Windows 7 Home Basic Automatic (Started) Automatic (Started)
Windows 7 Home Premium Automatic (Started) Automatic (Started)
Windows 7 Professional Automatic (Started) Automatic (Started)
Windows 7 Ultimate Automatic (Started) Automatic (Started)
Windows 7 Enterprise Automatic (Started) Automatic (Started)

Service Names

Service Name (registry): CryptSvc
Display Name: Cryptographic Services

Default Path and Command Line Options

C:\Windows\system32\svchost.exe -k NetworkService

Log On As

Account: Network Service

Dependencies

What service Cryptographic Services needs to function properly:

What other service require Cryptographic Services to function properly:

Windows Vista

Default Description

Provides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Additional Information

Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is disabled. This service is required for Windows Update to function in manual and automatic mode. Windows Media Player and future .NET and Live applications may also require this service for some “features” to function.

Automatic Updates still requires Windows Update, <strong >Cryptographic Services, Background Intelligent Transfer Service, and Windows Event Log to be running. Place all four in automatic if you do not wish to update manually. In addition, I recommend that you change the default time of 3 AM, for the automatic checking of updates, to a time when the system is “normally” on. Otherwise, Windows Update will check upon boot which may slow down the boot process.

Default Startup Type

OS SP0 SP1 SP2
Vista Home Basic Automatic (Started) Automatic (Started) Automatic (Started)
Vista Home Premium Automatic (Started) Automatic (Started) Automatic (Started)
Vista Business Automatic (Started) Automatic (Started) Automatic (Started)
Vista Ultimate Automatic (Started) Automatic (Started) Automatic (Started)
Vista Enterprise Automatic (Started) Automatic (Started) Automatic (Started)

Service Names

Service Name (registry): CryptSvc
Display Name: Cryptographic Services

Default Path and Command Line Options

C:\Windows\system32\svchost.exe -k NetworkService

Log On As

Account: Network Service

Dependencies

What service Cryptographic Services needs to function properly:

What other service require Cryptographic Services to function properly:

  • None (HB, HP, B, U)

Windows XP Pro x64

Default Description

Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Additional Information

Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is disabled. This service is required for Windows Update to function in manual and automatic mode and this service is required to install Service Pack 1 and 2 unified updates and DirectX 9.0c. Windows Media Player and future .NET applications may also require this service for some “features” to function. This service uses about 1.9 MB of memory.

Take note: Manual updates via Windows Update Version 6 web site still requires Automatic Updates, Background Intelligent Transfer Service, COM+ Event System, <strong >Cryptographic Services, and Event Log to be running. Place all in automatic if you do not wish to update manually. In addition, I recommend that you change the default time of 3AM, for the automatic checking of updates, to a time when the system is “normally” on. Otherwise, Windows Update will check upon boot which may slow down the boot process.

Default Startup Type

OS SP0 SP1 SP2
XP Pro x64  ?  ? Automatic

Service Names

Service Name (registry): CryptSvc
Display Name: Cryptographic Services

Default Path and Command Line Options

C:\WINDOWS\system32\svchost.exe -k netsvcs

Log On As

Account: Local System Account

Dependencies

What service Cryptographic Services needs to function properly:

What other service require Cryptographic Services to function properly:

  • None

Windows XP

Default Description

Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.

Additional Information

Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is disabled. This service is required for Windows Update to function in manual and automatic mode and this service is required to install Service Pack 1 and 2 unified updates and DirectX 9.0c. Windows Media Player and future .NET applications may also require this service for some “features” to function. This service uses about 1.9 MB of memory.

Take note: Manual updates via Windows Update Version 6 web site still requires Automatic Updates, Background Intelligent Transfer Service, COM+ Event System, <strong >Cryptographic Services, and Event Log to be running. Place all in automatic if you do not wish to update manually. In addition, I recommend that you change the default time of 3AM, for the automatic checking of updates, to a time when the system is “normally” on. Otherwise, Windows Update will check upon boot which may slow down the boot process.

Default Startup Type

OS SP0 SP1 SP2 SP3
XP Home Automatic (Started) Automatic (Started) Automatic (Started) Automatic (Started)
XP MCE 2005 Automatic (Started) Automatic (Started) Automatic (Started) Automatic (Started)
XP Pro Automatic (Started) Automatic (Started) Automatic (Started) Automatic (Started)
XP Tablet PC 2005 Automatic (Started) Automatic (Started) Automatic (Started) Automatic (Started)

Service Names

Service Name (registry): CryptSvc
Display Name: Cryptographic Services

Default Path and Command Line Options

C:\WINDOWS\system32\svchost.exe -k netsvcs

Log On As

Account: Local System Account

Dependencies

What service Cryptographic Services needs to function properly:

What other service require Cryptographic Services to function properly:

  • None (H, M, P, T)

Additional Reading