FIX: Encryption Keys Are Not Stored in the System Registry (329096)


The information in this article applies to:

  • Microsoft Windows CE .NET 4.0
This article was previously published under Q329096

SYMPTOMS

Encrypted information, such as passwords to network shares and Remote Desktop connections, is not retained through a system suspend and resume or a warm reset on operating systems that do not retain the contents of RAM through such events.

CAUSE

Windows CE .NET stores the encryption key information in files in the Windows folder instead of in the system registry. When an operating system (OS) design implements a registry persistence, such as with registry hive, WriteRegistryToOEM support, or RegCopyFile, the encryption keys are not saved. After you perform a system restart where the contents of the RAM file system is not retained, you cannot decrypt some registry data.

RESOLUTION

A supported software update is now available from Microsoft as Windows CE 4.0 Core OS QFE 329096. To resolve this problem immediately, click the following article number for information about obtaining Windows CE Platform Builder and core operating system software updates:

837392 How to locate core operating system fixes for Microsoft Windows CE Platform Builder products

The English version of this package should have the following file attributes or later: 
   Date         Time   Version     Size     File name
   ---------------------------------------------------------------------------
   06-Dec-2002  00:49  4.0.2.1205  715,360  021205_armv4i_wce40-q329096.exe
   06-Dec-2002  00:49  4.0.2.1205  703,072  021205_armv4t_wce40-q329096.exe
   06-Dec-2002  00:49  4.0.2.1205  715,360  021205_armv4_wce40-q329096.exe
   06-Dec-2002  00:49  4.0.2.1205  666,208  021205_mips16_wce40-q329096.exe
   06-Dec-2002  00:49  4.0.2.1205  744,032  021205_mipsii_fp_wce40-q329096.exe
   06-Dec-2002  00:49  4.0.2.1205  744,032  021205_mipsii_wce40-q329096.exe
   06-Dec-2002  00:49  4.0.2.1205  760,416  021205_mipsiv_fp_wce40-q329096.exe
   06-Dec-2002  00:49  4.0.2.1205  760,416  021205_mipsiv_wce40-q329096.exe
   06-Dec-2002  00:49  4.0.2.1205  686,688  021205_sh3_wce40-q329096.exe
   06-Dec-2002  00:49  4.0.2.1205  686,688  021205_sh4_wce40-q329096.exe
   06-Dec-2002  00:49  4.0.2.1205  621,152  021205_x86_wce40-q329096.exe
The English version of this fix has the file attributes (or later) that are listed in the following table. The dates and times for these files are listed in coordinated universal time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time tool in Control Panel. 
   Date         Time                     Size     File name
   --------------------------------------------------------------
   Path: Public\Common\Oak\Lib\Armv4\Debug
   20-Nov-2002  18:15                    129,602  Fsprofile.lib
   20-Nov-2002  18:15                     86,016  Fsprofile.pdb
   20-Nov-2002  18:15                    310,414  Fsreg.lib
   20-Nov-2002  18:15                     69,632  Fsreg.pdb
   20-Nov-2002  18:15                    362,494  Fsreghive.lib
   20-Nov-2002  18:15                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Armv4\Retail
   20-Nov-2002  18:14                    108,414  Fsprofile.lib
   20-Nov-2002  18:14                     86,016  Fsprofile.pdb
   20-Nov-2002  18:14                    213,404  Fsreg.lib
   20-Nov-2002  18:14                     69,632  Fsreg.pdb
   20-Nov-2002  18:14                    244,568  Fsreghive.lib
   20-Nov-2002  18:14                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Armv4i\Debug
   20-Nov-2002  18:17                    129,736  Fsprofile.lib
   20-Nov-2002  18:17                     86,016  Fsprofile.pdb
   20-Nov-2002  18:17                    310,760  Fsreg.lib
   20-Nov-2002  18:17                     69,632  Fsreg.pdb
   20-Nov-2002  18:17                    362,862  Fsreghive.lib
   20-Nov-2002  18:17                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Armv4i\Retail
   20-Nov-2002  18:17                    108,548  Fsprofile.lib
   20-Nov-2002  18:17                     86,016  Fsprofile.pdb
   20-Nov-2002  18:17                    213,714  Fsreg.lib
   20-Nov-2002  18:17                     69,632  Fsreg.pdb
   20-Nov-2002  18:17                    244,930  Fsreghive.lib
   20-Nov-2002  18:17                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Armv4t\Debug
   20-Nov-2002  18:16                    124,418  Fsprofile.lib
   20-Nov-2002  18:16                     86,016  Fsprofile.pdb
   20-Nov-2002  18:16                    294,280  Fsreg.lib
   20-Nov-2002  18:16                     69,632  Fsreg.pdb
   20-Nov-2002  18:16                    344,806  Fsreghive.lib
   20-Nov-2002  18:16                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Armv4t\Retail
   20-Nov-2002  18:15                    106,364  Fsprofile.lib
   20-Nov-2002  18:15                     86,016  Fsprofile.pdb
   20-Nov-2002  18:16                    209,622  Fsreg.lib
   20-Nov-2002  18:16                     69,632  Fsreg.pdb
   20-Nov-2002  18:15                    240,186  Fsreghive.lib
   20-Nov-2002  18:15                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Mips16\Debug
   20-Nov-2002  18:20                    117,998  Fsprofile.lib
   20-Nov-2002  18:20                     86,016  Fsprofile.pdb
   20-Nov-2002  18:20                    272,864  Fsreg.lib
   20-Nov-2002  18:20                     69,632  Fsreg.pdb
   20-Nov-2002  18:20                    320,300  Fsreghive.lib
   20-Nov-2002  18:20                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Mips16\Retail
   20-Nov-2002  18:20                     94,746  Fsprofile.lib
   20-Nov-2002  18:20                     86,016  Fsprofile.pdb
   20-Nov-2002  18:20                    178,370  Fsreg.lib
   20-Nov-2002  18:20                     69,632  Fsreg.pdb
   20-Nov-2002  18:20                    208,156  Fsreghive.lib
   20-Nov-2002  18:20                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Mipsii\Debug
   20-Nov-2002  18:18                    132,088  Fsprofile.lib
   20-Nov-2002  18:18                     86,016  Fsprofile.pdb
   20-Nov-2002  18:18                    324,378  Fsreg.lib
   20-Nov-2002  18:18                     69,632  Fsreg.pdb
   20-Nov-2002  18:18                    376,382  Fsreghive.lib
   20-Nov-2002  18:18                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Mipsii\Retail
   20-Nov-2002  18:18                    109,374  Fsprofile.lib
   20-Nov-2002  18:18                     86,016  Fsprofile.pdb
   20-Nov-2002  18:18                    215,732  Fsreg.lib
   20-Nov-2002  18:18                     69,632  Fsreg.pdb
   20-Nov-2002  18:18                    249,004  Fsreghive.lib
   20-Nov-2002  18:18                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\MipsII_fp\Debug
   20-Nov-2002  18:21                    132,128  Fsprofile.lib
   20-Nov-2002  18:21                     86,016  Fsprofile.pdb
   20-Nov-2002  18:21                    324,438  Fsreg.lib
   20-Nov-2002  18:21                     69,632  Fsreg.pdb
   20-Nov-2002  18:21                    376,450  Fsreghive.lib
   20-Nov-2002  18:21                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\MipsII_fp\Retail
   20-Nov-2002  18:21                    109,416  Fsprofile.lib
   20-Nov-2002  18:21                     86,016  Fsprofile.pdb
   20-Nov-2002  18:21                    215,794  Fsreg.lib
   20-Nov-2002  18:21                     69,632  Fsreg.pdb
   20-Nov-2002  18:21                    249,078  Fsreghive.lib
   20-Nov-2002  18:21                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Mipsiv\Debug
   20-Nov-2002  18:19                    134,098  Fsprofile.lib
   20-Nov-2002  18:19                     86,016  Fsprofile.pdb
   20-Nov-2002  18:19                    333,164  Fsreg.lib
   20-Nov-2002  18:19                     69,632  Fsreg.pdb
   20-Nov-2002  18:19                    386,104  Fsreghive.lib
   20-Nov-2002  18:19                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Mipsiv\Retail
   20-Nov-2002  18:19                    111,614  Fsprofile.lib
   20-Nov-2002  18:19                     86,016  Fsprofile.pdb
   20-Nov-2002  18:19                    224,060  Fsreg.lib
   20-Nov-2002  18:19                     69,632  Fsreg.pdb
   20-Nov-2002  18:19                    258,110  Fsreghive.lib
   20-Nov-2002  18:19                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Mipsiv_fp\Debug
   20-Nov-2002  18:22                    134,138  Fsprofile.lib
   20-Nov-2002  18:22                     86,016  Fsprofile.pdb
   20-Nov-2002  18:22                    333,224  Fsreg.lib
   20-Nov-2002  18:22                     69,632  Fsreg.pdb
   20-Nov-2002  18:22                    386,172  Fsreghive.lib
   20-Nov-2002  18:22                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Mipsiv_fp\Retail
   20-Nov-2002  18:22                    111,652  Fsprofile.lib
   20-Nov-2002  18:22                     86,016  Fsprofile.pdb
   20-Nov-2002  18:22                    224,118  Fsreg.lib
   20-Nov-2002  18:22                     69,632  Fsreg.pdb
   20-Nov-2002  18:22                    258,180  Fsreghive.lib
   20-Nov-2002  18:22                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Sh3\Debug
   20-Nov-2002  18:13                    118,490  Fsprofile.lib
   20-Nov-2002  18:13                     86,016  Fsprofile.pdb
   20-Nov-2002  18:13                    273,250  Fsreg.lib
   20-Nov-2002  18:13                     69,632  Fsreg.pdb
   20-Nov-2002  18:13                    322,080  Fsreghive.lib
   20-Nov-2002  18:13                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Sh3\Retail
   20-Nov-2002  18:12                    101,240  Fsprofile.lib
   20-Nov-2002  18:12                     86,016  Fsprofile.pdb
   20-Nov-2002  18:12                    193,886  Fsreg.lib
   20-Nov-2002  18:12                     69,632  Fsreg.pdb
   20-Nov-2002  18:12                    224,546  Fsreghive.lib
   20-Nov-2002  18:12                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Sh4\Debug
   20-Nov-2002  18:14                    118,466  Fsprofile.lib
   20-Nov-2002  18:14                     86,016  Fsprofile.pdb
   20-Nov-2002  18:14                    273,174  Fsreg.lib
   20-Nov-2002  18:14                     69,632  Fsreg.pdb
   20-Nov-2002  18:14                    321,984  Fsreghive.lib
   20-Nov-2002  18:14                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\Sh4\Retail
   20-Nov-2002  18:13                    101,178  Fsprofile.lib
   20-Nov-2002  18:13                     86,016  Fsprofile.pdb
   20-Nov-2002  18:13                    193,696  Fsreg.lib
   20-Nov-2002  18:13                     69,632  Fsreg.pdb
   20-Nov-2002  18:13                    224,386  Fsreghive.lib
   20-Nov-2002  18:13                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\X86\Debug
   20-Nov-2002  18:12                    114,254  Fsprofile.lib
   20-Nov-2002  18:12                     86,016  Fsprofile.pdb
   20-Nov-2002  18:12                    263,794  Fsreg.lib
   20-Nov-2002  18:12                     69,632  Fsreg.pdb
   20-Nov-2002  18:12                    308,516  Fsreghive.lib
   20-Nov-2002  18:12                     69,632  Fsreghive.pdb

   Path: Public\Common\Oak\Lib\X86\Retail
   20-Nov-2002  18:11                     88,136  Fsprofile.lib
   20-Nov-2002  18:11                     86,016  Fsprofile.pdb
   20-Nov-2002  18:11                    166,848  Fsreg.lib
   20-Nov-2002  18:11                     69,632  Fsreg.pdb
   20-Nov-2002  18:11                    190,922  Fsreghive.lib
   20-Nov-2002  18:11                     69,632  Fsreghive.pdb

MORE INFORMATION

This fix makes a change that adds the option to store the encryption keys in the system registry so that the persistent registry implementation will retain the encryption keys. To activate storage of encryption keys in the registry instead of as a file in the Windows folder, you must include the following registry value in the OS:

[HKEY_LOCAL_MACHINE\Init\BootVars] "MasterKeysInRegistry"=dword:1

If you do not set this key, or if you set this key to 0, the encryption keys are stored in a file as before.

Important
  • On some operating systems, if you have the CryptProtectData keys in the registry, an unauthorized user may gain access to them more easily.
  • If the operating system uses the OS SetPassword/CheckPassword API, and protects the system keys by using this password, you cannot use the keys after you restore the registry because the OS device password is not persisted unless you use the hive-based registry.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article.
Modification Type:MinorLast Reviewed:5/27/2005
Keywords:kbbug kbfix KB329096 kbAudOEM
©2004 Microsoft Corporation. All rights reserved.