Notice: This website is an unofficial Microsoft Knowledge Base (hereinafter KB) archive and is intended to provide a reliable access to deleted content from Microsoft KB. All KB articles are owned by Microsoft Corporation. Read full disclaimer for more details.

The Lsass.exe process crashes when you sign in to Lync 2010 to load a certificate from roaming profiles in Windows


View products that this article applies to.

Symptoms

Consider the following scenario:
  • You previously used a Windows XP-based client computer.
  • You configure your account to use roaming profiles to log on to a client computer that is running Windows 7, Windows Server 2008 R2, Windows Vista, or Windows Server 2008.
  • You sign in to Microsoft Lync 2010 to load the certificate from the roaming profile.
In this scenario, the Local Security Authority Subsystem Service (Lsass.exe) process crashes.

Note This issue occurs when you run any application that calls the CredWrite function by using a CRED_TYPE_GENERIC_CERTIFICATE type credential.

Additionally, this issue also occurs when Credential Management (CredMan) loads Microsoft Office Communication Server (OCS) certificates from the roaming profile.

↑ Back to the top


Resolution

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must be running one of the following operating systems:
  • Windows 7 Service Pack 1 (SP1)
  • Windows Server 2008 R2 Service Pack 1 (SP1)
  • Windows Vista Service Pack 2 (SP2)
  • Windows Server 2008 SP2
For more information about how to obtain a Windows 7 or Windows Server 2008 R2 service pack, click the following article number to view the article in the Microsoft Knowledge Base:

976932 Information about Service Pack 1 for Windows 7 and for Windows Server 2008 R2

For more information about how to obtain a Windows Vista service pack, click the following article number to view the article in the Microsoft Knowledge Base:
935791 How to obtain the latest Windows Vista service pack
For more information about how to obtain a Windows Server 2008 service pack, click the following article number to view the article in the Microsoft Knowledge Base:
968849 How to obtain the latest service pack for Windows Server 2008

Registry information

To apply this hotfix, you do not have to make any changes to the registry.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.
File information
The global version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.
Windows 7 and Windows Server 2008 R2 file information notes
Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:
    VersionProductMilestoneService branch
    6.1.760
    1.21xxx
    Windows 7 and Windows Server 2008 R2SP1LDR
  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7 and for Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows 7
File nameFile versionFile sizeDateTimePlatform
Cng.sys6.1.7601.21971369,35219-Apr-201204:34x86
Ksecdd.sys6.1.7601.2197167,44019-Apr-201204:36x86
Ksecpkg.sys6.1.7601.21971134,00019-Apr-201204:36x86
Lsasrv.dll6.1.7601.219711,038,84819-Apr-201204:28x86
Lsasrv.mofNot applicable13,78012-Nov-201023:53Not applicable
Lsass.exe6.1.7601.2197122,52819-Apr-201204:26x86
Secur32.dll6.1.7601.2197122,01619-Apr-201204:31x86
Sspicli.dll6.1.7601.21971100,35219-Apr-201204:31x86
Sspisrv.dll6.1.7601.2197115,87219-Apr-201204:31x86
Schannel.dll6.1.7601.21971224,76819-Apr-201204:31x86
For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2
File nameFile versionFile sizeDateTimePlatform
Cng.sys6.1.7601.21971459,23219-Apr-201205:26x64
Ksecdd.sys6.1.7601.2197195,60019-Apr-201205:28x64
Ksecpkg.sys6.1.7601.21971152,43219-Apr-201205:28x64
Lsasrv.dll6.1.7601.219711,446,40019-Apr-201205:20x64
Lsasrv.mofNot applicable13,78012-Nov-201023:50Not applicable
Lsass.exe6.1.7601.2197131,23219-Apr-201205:17x64
Secur32.dll6.1.7601.2197128,16019-Apr-201205:22x64
Sspicli.dll6.1.7601.21971136,19219-Apr-201205:23x64
Sspisrv.dll6.1.7601.2197129,18419-Apr-201205:23x64
Schannel.dll6.1.7601.21971340,99219-Apr-201205:22x64
Lsasrv.mofNot applicable13,78012-Nov-201023:53Not applicable
Secur32.dll6.1.7601.2197122,01619-Apr-201204:31x86
Sspicli.dll6.1.7601.2197196,76819-Apr-201204:25x86
Schannel.dll6.1.7601.21971224,76819-Apr-201204:31x86
For all supported IA-64-based versions of Windows Server 2008 R2
File nameFile versionFile sizeDateTimePlatform
Cng.sys6.1.7601.21971787,50419-Apr-201204:26IA-64
Ksecdd.sys6.1.7601.21971179,56819-Apr-201204:28IA-64
Ksecpkg.sys6.1.7601.21971307,56819-Apr-201204:28IA-64
Lsasrv.dll6.1.7601.219712,656,25619-Apr-201204:20IA-64
Lsasrv.mofNot applicable13,78012-Nov-201023:52Not applicable
Lsass.exe6.1.7601.2197156,32019-Apr-201204:17IA-64
Secur32.dll6.1.7601.2197148,64019-Apr-201204:23IA-64
Sspicli.dll6.1.7601.21971275,45619-Apr-201204:23IA-64
Sspisrv.dll6.1.7601.2197146,08019-Apr-201204:23IA-64
Schannel.dll6.1.7601.21971647,68019-Apr-201204:23IA-64
Lsasrv.mofNot applicable13,78012-Nov-201023:53Not applicable
Secur32.dll6.1.7601.2197122,01619-Apr-201204:31x86
Sspicli.dll6.1.7601.2197196,76819-Apr-201204:25x86
Schannel.dll6.1.7601.21971224,76819-Apr-201204:31x86


Windows Vista and Windows Server 2008 file information notes

Important Windows Vista hotfixes and Windows Server 2008 hotfixes are included in the same packages. However, only "Windows Vista" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows Vista" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.
  • The files that apply to a specific product, SR_Level (RTM, SP n ), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.
  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separatelyin the "Additional file information for Windows Server 2008 and for Windows Vista" section. MUM files and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.
For all supported x86-based versions of Windows Server 2008 and of Windows Vista
File nameFile versionFile sizeDateTimePlatform
Ksecdd.sys6.0.6002.23105440,68021-Feb-201407:42x86
Lsasrv.dll6.0.6002.233931,262,08013-May-201408:55x86
Lsasrv.mofNot applicable13,78021-Feb-201407:44Not applicable
Lsass.exe6.0.6002.233939,72813-May-201407:36x86
Secur32.dll6.0.6002.2339372,70413-May-201408:57x86
Wdigest.dll6.0.6002.23393175,61613-May-201408:57x86
Msv1_0.dll6.0.6002.23393218,62413-May-201408:55x86
Schannel.dll6.0.6002.23393279,55213-May-201408:57x86


For all supported x64-based versions of Windows Server 2008 and of Windows Vista
File nameFile versionFile sizeDateTimePlatform
Ksecdd.sys6.0.6002.23105517,48021-Feb-201407:56x64
Lsasrv.dll6.0.6002.233931,693,18413-May-201409:46x64
Lsasrv.mofNot applicable13,78021-Feb-201408:00Not applicable
Lsass.exe6.0.6002.2339311,26413-May-201408:18x64
Secur32.dll6.0.6002.2339394,72013-May-201409:48x64
Wdigest.dll6.0.6002.23393205,82413-May-201409:49x64
Msv1_0.dll6.0.6002.23393269,31213-May-201409:47x64
Schannel.dll6.0.6002.23393348,16013-May-201409:48x64
Lsasrv.mofNot applicable13,78021-Feb-201407:44Not applicable
Secur32.dll6.0.6002.2339377,31213-May-201408:58x86
Wdigest.dll6.0.6002.23393175,61613-May-201408:57x86
Msv1_0.dll6.0.6002.23393218,62413-May-201408:55x86
Schannel.dll6.0.6002.23393279,55213-May-201408:57x86


For all supported IA-64-based versions of Windows Server 2008
File nameFile versionFile sizeDateTimePlatform
Ksecdd.sys6.0.6002.231051,030,50421-Feb-201407:50IA-64
Lsasrv.dll6.0.6002.233933,265,02413-May-201408:29IA-64
Lsasrv.mofNot applicable13,78021-Feb-201407:52Not applicable
Lsass.exe6.0.6002.2339317,92013-May-201407:20IA-64
Secur32.dll6.0.6002.23393202,75213-May-201408:31IA-64
Wdigest.dll6.0.6002.23393483,32813-May-201408:32IA-64
Msv1_0.dll6.0.6002.23393570,36813-May-201408:30IA-64
Schannel.dll6.0.6002.23393812,03213-May-201408:31IA-64
Lsasrv.mofNot applicable13,78021-Feb-201407:44Not applicable
Secur32.dll6.0.6002.2339377,31213-May-201408:58x86
Wdigest.dll6.0.6002.23393175,61613-May-201408:57x86
Msv1_0.dll6.0.6002.23393218,62413-May-201408:55x86
Schannel.dll6.0.6002.23393279,55213-May-201408:57x86




↑ Back to the top


Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

↑ Back to the top


More Information

For more information about the Credential, visit the following Microsoft websites:
For more information about roaming user profiles, visit the following Microsoft website:For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional file information

Additional file information for Windows 7 and for Windows Server 2008 R2

Additional files for all supported x86-based versions of Windows 7
File nameX86_37b47936b16d240ac20a43ca6b67c9ac_31bf3856ad364e35_6.1.7601.21971_none_683953709a4861eb.manifest
File versionNot applicable
File size1,040
Date (UTC)19-Apr-2012
Time (UTC)18:12
PlatformNot applicable
File nameX86_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21971_none_a897b6c4d45e4421.manifest
File versionNot applicable
File size99,806
Date (UTC)19-Apr-2012
Time (UTC)04:57
PlatformNot applicable
File nameX86_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.21971_none_24637710ccd5e2ac.manifest
File versionNot applicable
File size12,919
Date (UTC)19-Apr-2012
Time (UTC)05:01
PlatformNot applicable
Additional files for all supported x64-based versions of Windows 7 and of Windows Server 2008 R2
File nameAmd64_3cda6d90e5b62028f5c7c3151e2ab94d_31bf3856ad364e35_6.1.7601.21971_none_a53c6e5350ab2151.manifest
File versionNot applicable
File size1,734
Date (UTC)19-Apr-2012
Time (UTC)18:12
PlatformNot applicable
File nameAmd64_4328615a696a51e94f0f8c7be343cde4_31bf3856ad364e35_6.1.7601.21971_none_44bc70f8b71b1599.manifest
File versionNot applicable
File size709
Date (UTC)19-Apr-2012
Time (UTC)18:12
PlatformNot applicable
File nameAmd64_bb3baa4c31f2a1155992584dfb2e2e54_31bf3856ad364e35_6.1.7601.21971_none_a7475c2c40d4f3a7.manifest
File versionNot applicable
File size1,046
Date (UTC)19-Apr-2012
Time (UTC)18:12
PlatformNot applicable
File nameAmd64_dd548d63492c5314df7e5fd090cfc791_31bf3856ad364e35_6.1.7601.21971_none_736b7025ab29b268.manifest
File versionNot applicable
File size1,383
Date (UTC)19-Apr-2012
Time (UTC)18:12
PlatformNot applicable
File nameAmd64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21971_none_04b652488cbbb557.manifest
File versionNot applicable
File size99,810
Date (UTC)19-Apr-2012
Time (UTC)05:52
PlatformNot applicable
File nameAmd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.21971_none_80821294853353e2.manifest
File versionNot applicable
File size12,921
Date (UTC)19-Apr-2012
Time (UTC)05:56
PlatformNot applicable
File nameWow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21971_none_0f0afc9ac11c7752.manifest
File versionNot applicable
File size86,382
Date (UTC)19-Apr-2012
Time (UTC)04:49
PlatformNot applicable
File nameWow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.21971_none_8ad6bce6b99415dd.manifest
File versionNot applicable
File size6,945
Date (UTC)19-Apr-2012
Time (UTC)04:48
PlatformNot applicable
Additional files for all supported IA-64-based versions of Windows Server 2008 R2
File nameIa64_50e8d2541a95250933cf7aa1b6c98342_31bf3856ad364e35_6.1.7601.21971_none_7c4bd4c4ebabc257.manifest
File versionNot applicable
File size1,731
Date (UTC)19-Apr-2012
Time (UTC)18:12
PlatformNot applicable
File nameIa64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21971_none_a8995abad45c4d1d.manifest
File versionNot applicable
File size99,808
Date (UTC)19-Apr-2012
Time (UTC)05:45
PlatformNot applicable
File nameIa64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.21971_none_24651b06ccd3eba8.manifest
File versionNot applicable
File size12,920
Date (UTC)19-Apr-2012
Time (UTC)05:49
PlatformNot applicable
File nameWow64_microsoft-windows-lsa_31bf3856ad364e35_6.1.7601.21971_none_0f0afc9ac11c7752.manifest
File versionNot applicable
File size86,382
Date (UTC)19-Apr-2012
Time (UTC)04:49
PlatformNot applicable
File nameWow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.1.7601.21971_none_8ad6bce6b99415dd.manifest
File versionNot applicable
File size6,945
Date (UTC)19-Apr-2012
Time (UTC)04:48
PlatformNot applicable


Additional file information for Windows Vista and for Windows Server 2008



Additional files for all supported x86-based versions of Windows Vista and of Windows Server 2008
File propertyValue
File nameX86_a34806ffe529761b2e3614f882458ab5_31bf3856ad364e35_6.0.6002.23393_none_e3def07fe0cb18e4.manifest
File versionNot applicable
File size703
Date (UTC)13-May-2014
Time (UTC)17:58
PlatformNot applicable
File nameX86_b5da90b3d23025c3580c606936f03ed0_31bf3856ad364e35_6.0.6002.23393_none_c4ef14f15462b2f3.manifest
File versionNot applicable
File size1,385
Date (UTC)13-May-2014
Time (UTC)17:58
PlatformNot applicable
File nameX86_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.23393_none_a85c3dbd73558006.manifest
File versionNot applicable
File size34,359
Date (UTC)13-May-2014
Time (UTC)09:38
PlatformNot applicable
File nameX86_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.23393_none_3cdefe12933f5b99.manifest
File versionNot applicable
File size9,924
Date (UTC)13-May-2014
Time (UTC)09:41
PlatformNot applicable
File nameX86_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.23393_none_7ec49fce79150ae8.manifest
File versionNot applicable
File size18,890
Date (UTC)13-May-2014
Time (UTC)09:40
PlatformNot applicable
File nameX86_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.23393_none_2427fe096bcd1e91.manifest
File versionNot applicable
File size18,090
Date (UTC)13-May-2014
Time (UTC)09:41
PlatformNot applicable


Additional files for all supported x64-based versions of Windows Vista and of Windows Server 2008
File propertyValue
File nameAmd64_5eec2a36a3f2ea91e0fff4424ed81411_31bf3856ad364e35_6.0.6002.23393_none_4bddd7e4066e83c2.manifest
File versionNot applicable
File size2,428
Date (UTC)13-May-2014
Time (UTC)17:58
PlatformNot applicable
File nameAmd64_f849838c2a7adb9e5b3e93d338c2df79_31bf3856ad364e35_6.0.6002.23393_none_901723161b40677b.manifest
File versionNot applicable
File size1,056
Date (UTC)13-May-2014
Time (UTC)17:58
PlatformNot applicable
File nameAmd64_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.23393_none_047ad9412bb2f13c.manifest
File versionNot applicable
File size34,447
Date (UTC)13-May-2014
Time (UTC)10:44
PlatformNot applicable
File nameAmd64_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.23393_none_98fd99964b9ccccf.manifest
File versionNot applicable
File size9,948
Date (UTC)13-May-2014
Time (UTC)10:49
PlatformNot applicable
File nameAmd64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.23393_none_dae33b5231727c1e.manifest
File versionNot applicable
File size18,926
Date (UTC)13-May-2014
Time (UTC)10:47
PlatformNot applicable
File nameAmd64_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.23393_none_8046998d242a8fc7.manifest
File versionNot applicable
File size18,120
Date (UTC)13-May-2014
Time (UTC)10:48
PlatformNot applicable
File nameWow64_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.23393_none_0ecf83936013b337.manifest
File versionNot applicable
File size21,959
Date (UTC)13-May-2014
Time (UTC)09:35
PlatformNot applicable
File nameWow64_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.23393_none_a35243e87ffd8eca.manifest
File versionNot applicable
File size10,140
Date (UTC)13-May-2014
Time (UTC)09:35
PlatformNot applicable
File nameWow64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.23393_none_e537e5a465d33e19.manifest
File versionNot applicable
File size17,843
Date (UTC)13-May-2014
Time (UTC)09:35
PlatformNot applicable
File nameWow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.23393_none_8a9b43df588b51c2.manifest
File versionNot applicable
File size17,557
Date (UTC)13-May-2014
Time (UTC)09:35
PlatformNot applicable


Additional files for all supported IA-64-based versions of Windows Server 2008
File propertyValue
File nameIa64_18d9d0609e979703bd6f7c6af7b4b045_31bf3856ad364e35_6.0.6002.23393_none_8c4795be32637601.manifest
File versionNot applicable
File size1,054
Date (UTC)13-May-2014
Time (UTC)17:58
PlatformNot applicable
File nameIa64_7bcad5e11da284de6d15c87347a1f60c_31bf3856ad364e35_6.0.6002.23393_none_9f0f89daf660e6cb.manifest
File versionNot applicable
File size2,424
Date (UTC)13-May-2014
Time (UTC)17:58
PlatformNot applicable
File nameIa64_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.23393_none_a85de1b373538902.manifest
File versionNot applicable
File size34,403
Date (UTC)13-May-2014
Time (UTC)09:21
PlatformNot applicable
File nameIa64_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.23393_none_3ce0a208933d6495.manifest
File versionNot applicable
File size9,936
Date (UTC)13-May-2014
Time (UTC)09:23
PlatformNot applicable
File nameIa64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.23393_none_7ec643c4791313e4.manifest
File versionNot applicable
File size18,908
Date (UTC)13-May-2014
Time (UTC)09:22
PlatformNot applicable
File nameIa64_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.23393_none_2429a1ff6bcb278d.manifest
File versionNot applicable
File size18,105
Date (UTC)13-May-2014
Time (UTC)09:23
PlatformNot applicable
File nameWow64_microsoft-windows-lsa_31bf3856ad364e35_6.0.6002.23393_none_0ecf83936013b337.manifest
File versionNot applicable
File size21,959
Date (UTC)13-May-2014
Time (UTC)09:35
PlatformNot applicable
File nameWow64_microsoft-windows-security-digest_31bf3856ad364e35_6.0.6002.23393_none_a35243e87ffd8eca.manifest
File versionNot applicable
File size10,140
Date (UTC)13-May-2014
Time (UTC)09:35
PlatformNot applicable
File nameWow64_microsoft-windows-security-ntlm_31bf3856ad364e35_6.0.6002.23393_none_e537e5a465d33e19.manifest
File versionNot applicable
File size17,843
Date (UTC)13-May-2014
Time (UTC)09:35
PlatformNot applicable
File nameWow64_microsoft-windows-security-schannel_31bf3856ad364e35_6.0.6002.23393_none_8a9b43df588b51c2.manifest
File versionNot applicable
File size17,557
Date (UTC)13-May-2014
Time (UTC)09:35
PlatformNot applicable

↑ Back to the top


Keywords: kb, kbautohotfix, kbqfe, kbhotfixserver, kbfix, kbsurveynew, kbexpertiseadvanced

↑ Back to the top

Article Info
Article ID : 2691043
Revision : 1
Created on : 1/7/2017
Published on : 7/8/2014
Exists online : False
Views : 245