diff --git a/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/CngKeyCreationOptions.cs b/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/CngKeyCreationOptions.cs
index f3f3e7fb42321..9a7155b09022a 100644
--- a/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/CngKeyCreationOptions.cs
+++ b/src/libraries/System.Security.Cryptography/src/System/Security/Cryptography/CngKeyCreationOptions.cs
@@ -15,8 +15,21 @@ public enum CngKeyCreationOptions : int
None = 0x00000000,
MachineKey = 0x00000020, // NCRYPT_MACHINE_KEY_FLAG
OverwriteExistingKey = 0x00000080, // NCRYPT_OVERWRITE_KEY_FLAG
+
+ ///
+ /// Indicates a key should be protected with Virtualization-based security (VBS).
+ ///
PreferVbs = 0x00010000, // NCRYPT_PREFER_VBS_FLAG
+
+ ///
+ /// Indicates a key must be protected with Virtualization-based security (VBS).
+ ///
RequireVbs = 0x00020000, // NCRYPT_REQUIRE_VBS_FLAG
+
+ ///
+ /// Instructs Virtualization-based security (VBS) to protect the client key with a per-boot key
+ /// when combined with or .
+ ///
UsePerBootKey = 0x00040000, // NCRYPT_USE_PER_BOOT_KEY_FLAG
}
}