General Information
Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is disabled. This service is required for Windows Update to function in automatic mode. Windows Media Player and future .NET and Live applications may also require this service for some “features” to function.
Windows 8
Default Description
Provides three management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Additional Information
None at this time.
Default Startup Type
| OS | SP0 |
|---|---|
| Windows 8 x86 | Automatic (Started) |
| Windows 8 x64 | Automatic (Started) |
| Windows 8 Pro x86 | Automatic (Started) |
| Windows 8 Pro x64 | Automatic (Started) |
| Windows 8 Enterprise x86 | Automatic (Started) |
| Windows 8 Enterprise x64 | Automatic (Started) |
Service Names
Service Name (registry): CryptSvc
Display Name: Cryptographic Services
Default Path and Command Line Options
C:\Windows\system32\svchost.exe -k NetworkService
Log On As
Account: Network Service
Dependencies
Note: No dependencies are listed for any service in the WDP build I used to draft this information.
Windows 7
Default Description
Provides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Additional Information
Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is disabled. This service is required for Windows Update to function in manual and automatic mode. Windows Media Player and future .NET and Live applications may also require this service for some “features” to function.
Automatic Updates still requires Windows Update, <strong >Cryptographic Services, Background Intelligent Transfer Service, and Windows Event Log to be running. Place all four in automatic if you do not wish to update manually. In addition, I recommend that you change the default time of 3 AM, for the automatic checking of updates, to a time when the system is “normally” on. Otherwise, Windows Update will check upon boot which may slow down the boot process.
Default Startup Type
| OS | SP0 | SP1 |
|---|---|---|
| Windows 7 Starter | Automatic (Started) | Automatic (Started) |
| Windows 7 Home Basic | Automatic (Started) | Automatic (Started) |
| Windows 7 Home Premium | Automatic (Started) | Automatic (Started) |
| Windows 7 Professional | Automatic (Started) | Automatic (Started) |
| Windows 7 Ultimate | Automatic (Started) | Automatic (Started) |
| Windows 7 Enterprise | Automatic (Started) | Automatic (Started) |
Service Names
Service Name (registry): CryptSvc
Display Name: Cryptographic Services
Default Path and Command Line Options
C:\Windows\system32\svchost.exe -k NetworkService
Log On As
Account: Network Service
Dependencies
What service Cryptographic Services needs to function properly:
-
Remote Procedure Call (RPC)(S, HB, HP, P, U, E)
- DCOM Server Process Launcher (S, HB, HP, P, U, E)
- RPC Endpoint Mapper (S, HB, HP, P, U, E)
What other service require Cryptographic Services to function properly:
- Application Identity (S, HB, HP, P, U, E)
Windows Vista
Default Description
Provides four management services: Catalog Database Service, which confirms the signatures of Windows files and allows new programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios such as SSL; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Additional Information
Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is disabled. This service is required for Windows Update to function in manual and automatic mode. Windows Media Player and future .NET and Live applications may also require this service for some “features” to function.
Automatic Updates still requires Windows Update, <strong >Cryptographic Services, Background Intelligent Transfer Service, and Windows Event Log to be running. Place all four in automatic if you do not wish to update manually. In addition, I recommend that you change the default time of 3 AM, for the automatic checking of updates, to a time when the system is “normally” on. Otherwise, Windows Update will check upon boot which may slow down the boot process.
Default Startup Type
| OS | SP0 | SP1 | SP2 |
|---|---|---|---|
| Vista Home Basic | Automatic (Started) | Automatic (Started) | Automatic (Started) |
| Vista Home Premium | Automatic (Started) | Automatic (Started) | Automatic (Started) |
| Vista Business | Automatic (Started) | Automatic (Started) | Automatic (Started) |
| Vista Ultimate | Automatic (Started) | Automatic (Started) | Automatic (Started) |
| Vista Enterprise | Automatic (Started) | Automatic (Started) | Automatic (Started) |
Service Names
Service Name (registry): CryptSvc
Display Name: Cryptographic Services
Default Path and Command Line Options
C:\Windows\system32\svchost.exe -k NetworkService
Log On As
Account: Network Service
Dependencies
What service Cryptographic Services needs to function properly:
-
Remote Procedure Call (RPC)(HB, HP, B, U)
- DCOM Server Process Launcher (HB, HP, B, U)
What other service require Cryptographic Services to function properly:
- None (HB, HP, B, U)
Windows XP Pro x64
Default Description
Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Additional Information
Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is disabled. This service is required for Windows Update to function in manual and automatic mode and this service is required to install Service Pack 1 and 2 unified updates and DirectX 9.0c. Windows Media Player and future .NET applications may also require this service for some “features” to function. This service uses about 1.9 MB of memory.
Take note: Manual updates via Windows Update Version 6 web site still requires Automatic Updates, Background Intelligent Transfer Service, COM+ Event System, <strong >Cryptographic Services, and Event Log to be running. Place all in automatic if you do not wish to update manually. In addition, I recommend that you change the default time of 3AM, for the automatic checking of updates, to a time when the system is “normally” on. Otherwise, Windows Update will check upon boot which may slow down the boot process.
Default Startup Type
| OS | SP0 | SP1 | SP2 |
|---|---|---|---|
| XP Pro x64 | ? | ? | Automatic |
Service Names
Service Name (registry): CryptSvc
Display Name: Cryptographic Services
Default Path and Command Line Options
C:\WINDOWS\system32\svchost.exe -k netsvcs
Log On As
Account: Local System Account
Dependencies
What service Cryptographic Services needs to function properly:
What other service require Cryptographic Services to function properly:
- None
Windows XP
Default Description
Provides three management services: Catalog Database Service, which confirms the signatures of Windows files; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this computer; and Key Service, which helps enroll this computer for certificates. If this service is stopped, these management services will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start.
Additional Information
Mainly, it confirms signatures of Windows files. You may always get a dialog box complaining about uncertified drivers if this is disabled. This service is required for Windows Update to function in manual and automatic mode and this service is required to install Service Pack 1 and 2 unified updates and DirectX 9.0c. Windows Media Player and future .NET applications may also require this service for some “features” to function. This service uses about 1.9 MB of memory.
Take note: Manual updates via Windows Update Version 6 web site still requires Automatic Updates, Background Intelligent Transfer Service, COM+ Event System, <strong >Cryptographic Services, and Event Log to be running. Place all in automatic if you do not wish to update manually. In addition, I recommend that you change the default time of 3AM, for the automatic checking of updates, to a time when the system is “normally” on. Otherwise, Windows Update will check upon boot which may slow down the boot process.
Default Startup Type
| OS | SP0 | SP1 | SP2 | SP3 |
|---|---|---|---|---|
| XP Home | Automatic (Started) | Automatic (Started) | Automatic (Started) | Automatic (Started) |
| XP MCE 2005 | Automatic (Started) | Automatic (Started) | Automatic (Started) | Automatic (Started) |
| XP Pro | Automatic (Started) | Automatic (Started) | Automatic (Started) | Automatic (Started) |
| XP Tablet PC 2005 | Automatic (Started) | Automatic (Started) | Automatic (Started) | Automatic (Started) |
Service Names
Service Name (registry): CryptSvc
Display Name: Cryptographic Services
Default Path and Command Line Options
C:\WINDOWS\system32\svchost.exe -k netsvcs
Log On As
Account: Local System Account
Dependencies
What service Cryptographic Services needs to function properly:
- Remote Procedure Call (RPC) (H, M, P, T)
What other service require Cryptographic Services to function properly:
- None (H, M, P, T)
Additional Reading
- Certificate: https://en.wikipedia.org/wiki/Public_key_certificate
- SSL: https://en.wikipedia.org/wiki/Secure_Sockets_Layer
- Windows Update Web Site: https://update.microsoft.com/windowsupdate/v6/default.aspx