As we also know, RSA BSAFE has been using Dual_EC_DRBG by default, with a justification so stupid it can only be translated as "because NSA paid us to".
This comment on Ars Technica asserts that Microsoft also uses this generator. But I have seen claims to the contrary. Thus my questions are:
What PRNG does Windows Server use to generate private keys for Certificate Signing Requests?
What PRNG does Internet Explorer on Windows use to generate session keys? How about Chrome and Firefox on Windows?
What PRNG does IIS on Windows use to generate ephemeral key material for PFS?
I am most interested in the latest versions of all of these products, and certainly only those released after 2007. References or at least an air of authority are preferred.