Configuring the CSP-CNG Provider

A CSP (Cryptographic Service Provider) is a general-purpose cryptography standard developed by Microsoft. It defines a cryptographic interface for applications (CryptoAPI) and an interface for manufacturers to integrate their cryptographic hardware.

A CNG (Cryptography API Next Generation) is Microsoft's second-generation cryptographic interface. It offers updated cryptographic algorithms and is intended to replace CSP in the long term.

When installing the SecurityServer setup, make sure to select the CPS/CNG - Cryptographic Service Provider (Microsoft) interface. A Cryptographic User should be created, and an MBK should be generated.

Generating the MBK is necessary for the HSM to become operational. Without the MBK, one cannot run any cryptographic operations.