: Using the MS_PLATFORM_CRYPTO_PROVIDER ensures that keys are physically tied to the device's TPM, making them non-exportable and highly secure.
NCRYPT_PROV_HANDLE hProvider = NULL; SECURITY_STATUS status = NCryptOpenStorageProvider(&hProvider, MS_KEY_STORAGE_PROVIDER, 0); if (status == ERROR_SUCCESS) // operate: NCryptCreatePersistedKey, NCryptOpenKey, etc. NCryptFreeObject(hProvider); ncryptopenstorageprovider new