Help PLEASE: The Cryptographic Services will not start.

[hrboyce]

I have Vista with SP1 installed and have an error log filling with messages
that say:

The Cryptographic Services service terminated with the following error:
The specified module could not be found.

with the following details...
- <Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
- <System>
<Provider Name="Service Control Manager"
Guid="{555908D1-A6D7-4695-8E1E-26931D2012F4}" EventSourceName="Service
Control Manager" />
<EventID Qualifiers="49152">7023</EventID>
<Version>0</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x80000000000000</Keywords>
<TimeCreated SystemTime="2008-04-03T07:10:20.000Z" />
<EventRecordID>31562</EventRecordID>
<Correlation />
<Execution ProcessID="0" ThreadID="0" />
<Channel>System</Channel>
<Computer>vista PC</Computer>
<Security />
</System>
- <EventData>
<Data Name="param1">Cryptographic Services</Data>
<Data Name="param2">%%126</Data>
</EventData>
</Event>

The service can not be started manually and I can find no way to repair it

HELP please

 

[Mark L. Ferguson]

There are a number of methods you can try here.

You cannot install some updates or programs
http://support.microsoft.com/kb/822798/en-us

--
Was this helpful? Then click the Ratings button. Voting helps the web
interface.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm#RateAPostAsAnswer
Mark L. Ferguson
..

 

[hrboyce]

Mark - Thanks for the quick reply
Given that my problem does not yet relate to installing something new, and
more of a NOT FOUND issue with CryptSVC I am thinking option 5 (regsvr32 the
DLLs) would be the best place to start, would you agree? If I am missing
something due to corruption etc the command should fail and I would at least
have a starting point.

A few days ago I started getting notices that DfragNTFS was shutting down -
and in trying to solve that problem I found this one, my thought now is these
could be related?

 

[Mark L. Ferguson]

Most likely, both are based on file corruption. Trying SFC per this article,
would be next after trying the regsvr32 commands.
Some Windows Vista functions may not work, or Windows Vista may stop
responding: http://support.microsoft.com/kb/929833

This is also a good article for you.
Some services do not start in Windows Vista:
http://support.microsoft.com/kb/943996/en-us
--
Was this helpful? Then click the Ratings button. Voting helps the web
interface.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm#RateAPostAsAnswer
Mark L. Ferguson
..

 

[hrboyce]

I got the following results from the REGSVR32 commands:

regsvr32 /u softpub.dll
regsvr32 /u wintrust.dll
regsvr32 /u initpki.dll = the specific module could not be found
regsvr32 /u dssenh.dll
regsvr32 /u rsaenh.dll
regsvr32 /u gpkcsp.dll = the specific module could not be found
regsvr32 /u sccbase.dll = the specific module could not be found
regsvr32 /u slbcsp.dll = the specific module could not be found
regsvr32 /u mssip32.dll
regsvr32 /u cryptdlg.dll

on both the uninstall and install

so I ran the SFC scan as suggested and apparently it corrected some issues
but had 2 things it could not fix which both look the same to me...

2008-04-03 22:42:48, Info CSI 00000129 [SR] Cannot
repair member file [l:20{10}]"vssapi.dll" of Microsoft-Windows-VssApi,
Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture
neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35},
Type neutral, TypeName neutral, PublicKey neutral in the store, file is
missing

After running the scannow I also tried to regsrv32 the DLLs that failed
before with no luck.

Sooooo now I am not sure where to go with that... the good news in the
CRYPTO service started after the reinstall and the errors have ceased in the
event log for now. All other "automatic" services are functioning. There
were a number of new events after the unregister and reboot but I think that
would be expected.

The second article suggests a method for replacing a bad file with a good
one, the question then becomes where to get a "good" one - Is there some way
to get a copy of the vssapi.dll out of the SP1 executable so that I can
replace it and just how do I go about doing that, and if SFC did not find a
problem with the other DLLs why did regsrv32 fail to load them...

and THANKS AGAIN for your quick responses and help in this matter, your
advise seems to have been spot on so far.

 

[Mark L. Ferguson]

The regsvr32 results are probably due to changes made in SP1 for Vista. This
service is the most dynamic part of the Windows system, and I think it's not
surprising that you are seeing some differences in this.
The only way I know of to get another copy of the SP1 files is to uninstall
and reinstall. There is a very large download for the Resource Kit (AIK)
that has 'ximage.exe', a utility for extracting a file from the original
image (*.WIM). I'm really not sure which source would be right. (demo
article link below)
Keep your eye on the RPC(Remote Procedure Call) service. It's the key in
crypto stuff. It would be my guess you beat this one. Your Recovery screen
may offer a "Repair' option that would do the old style 'inplace upgrade'
leaving the registry unchanged, but systems vary by system maker.

(ximage article) The update is not installed successfully, you receive a
message, and the computer restarts when you try to install an update in
Windows Vista : http://support.microsoft.com/kb/949358/en-us
--
Was this helpful? Then click the Ratings button. Voting helps the web
interface.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm#RateAPostAsAnswer
Mark L. Ferguson
..

I got the following results from the REGSVR32 commands:

regsvr32 /u softpub.dll
regsvr32 /u wintrust.dll
regsvr32 /u initpki.dll = the specific module could not be
found
regsvr32 /u dssenh.dll
regsvr32 /u rsaenh.dll
regsvr32 /u gpkcsp.dll = the specific module could not be found
regsvr32 /u sccbase.dll = the specific module could not be found
regsvr32 /u slbcsp.dll = the specific module could not be found
regsvr32 /u mssip32.dll
regsvr32 /u cryptdlg.dll

on both the uninstall and install

so I ran the SFC scan as suggested and apparently it corrected some issues
but had 2 things it could not fix which both look the same to me...

2008-04-03 22:42:48, Info CSI 00000129 [SR] Cannot
repair member file [l:20{10}]"vssapi.dll" of Microsoft-Windows-VssApi,
Version = 6.0.6001.18000, pA = PROCESSOR_ARCHITECTURE_INTEL (0), Culture
neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8
b:31bf3856ad364e35},
Type neutral, TypeName neutral, PublicKey neutral in the store, file is
missing

After running the scannow I also tried to regsrv32 the DLLs that failed
before with no luck.

Sooooo now I am not sure where to go with that... the good news in the
CRYPTO service started after the reinstall and the errors have ceased in
the
event log for now. All other "automatic" services are functioning. There
were a number of new events after the unregister and reboot but I think
that
would be expected.

The second article suggests a method for replacing a bad file with a good
one, the question then becomes where to get a "good" one - Is there some
way
to get a copy of the vssapi.dll out of the SP1 executable so that I can
replace it and just how do I go about doing that, and if SFC did not find
a
problem with the other DLLs why did regsrv32 fail to load them...

and THANKS AGAIN for your quick responses and help in this matter, your
advise seems to have been spot on so far.

Most likely, both are based on file corruption. Trying SFC per this
article,
would be next after trying the regsvr32 commands.
Some Windows Vista functions may not work, or Windows Vista may stop
responding: http://support.microsoft.com/kb/929833

This is also a good article for you.
Some services do not start in Windows Vista:
http://support.microsoft.com/kb/943996/en-us
--
Was this helpful? Then click the Ratings button. Voting helps the web
interface.
http://www.microsoft.com/wn3/locales/help/help_en-us.htm#RateAPostAsAnswer
Mark L. Ferguson
.