Hi Kees,
rsaenh uses your Crypt[Un]ProtectData functions for protecting the user's private keys, which are stored in the registry. For machine key pairs (which are keys that belong to the machine instead of a certain user), rsaenh needs support for the CRYPTPROTECT_LOCAL_MACHINE flag. On possible implementation would be to derive the key from the computer name (GetComputerName) instead of from the user's login name, if the flag is set. Would you mind implementing something like this?
Bye,