How can I enable strong private key protection programmatically in C#?

How can I achieve the equivalent of setting the "strong private key protection" checkbox in certmgr.msc when adding a开发者_如何学编程n X509Certificate2 programmatically using C#?

You will have to setup the X509KeyStorageFlags accordingly when importing the certificate (i.e. MachineKeySet and UserProtected).