---
title: "CNG Key Stores - Amplia"
description: "Configure CNG key stores in Amplia through Key Storage Providers (KSPs) such as HSMs and tokens. Windows Server only."
canonical: "https://docs.lacunasoftware.com/en-us/articles/amplia/on-premises/key-stores/cng"
locale: "en"
product: "Amplia"
last_updated: "2026-10-08"
---

# CNG Key Stores - Amplia

> **Note**
>
> CNG Key Stores are only compatible with Windows Server installations

The **Cryptography API: Next Generation (CNG)** works with key storage through a number of **Key Storage Providers (KSPs)**
that do the actual work of storing keys. Devices such as Hardware Security Modules (HSMs) and cryptographic USB tokens may
provide a CNG KSP that can be used to communicate with the device.

Every CNG KSP is identified by a *name*. If using an HSM or crypto token, refer to the device's documentation
to find the name of the KSP. Additionally, see the section below for common KSP names.

To configure a CNG key store on Amplia, use the following settings:

* **Type**: `CNG`
* **ProviderName**: name that identifies the KSP to be used
* **UseMachineStore**: some KSPs have the concept of storing keys on the *user store* or on the *machine store* (most notably the OS's native KSP).
  By default, the user store is used. Set this setting to `true` to use the machine store.
* **Pin**: the PIN of the store, if required

Example (*.ini* or *.conf* configuration file):

```ini
[KeyStores:MyCngKeyStore]
Type=Cng
ProviderName=...
```

Example (environment variables):

```sh
KeyStores__MyCngKeyStore__Type=Cng
KeyStores__MyCngKeyStore__ProviderName=...
```

Example (*.json* configuration file):

```json
"KeyStores": {
	...,
	"MyCngKeyStore": {
		"Type": "Cng",
		"ProviderName": "..."
	},
	...
}
```

## Common CNG key stores

Safenet eToken cryptographic USB token:

```json
"CngToken": {
	"Type": "Cng",
	"ProviderName": "SafeNet Smart Card Key Storage Provider"
}
```

## See also

* [Key Stores](https://docs.lacunasoftware.com/en-us/articles/amplia/on-premises/key-stores)
* [Amplia on premises](https://docs.lacunasoftware.com/en-us/articles/amplia/on-premises)