Select the product you need help with

A digitally signed .NET Framework 2.0 Windows application may start very slowly, or a Windows service may time out during startup

Article ID: 941990 - View products that this article applies to.

SYMPTOMS

When you try to start a digitally signed Microsoft .NET Framework 2.0 Windows application or Windows service, the application starts very slowly. Digitally signed Windows services may time out during startup, and you receive the following error message from the Service Control Manager:

Error 1053: The service did not respond to the start or control request in a timely fashion.

Back to the top | Give Feedback

CAUSE

This problem occurs because the application must download the Certificate Revocation List (CRL) for authentication. However, a lack of network connectivity causes the download to fail by timing out. For example, a firewall may potentially block the download. When Windows first starts, the network connection is not yet initialized.

Back to the top | Give Feedback

RESOLUTION

To resolve this problem, use one of the following methods.

Method 1

Cache the certificates locally.

Note The certificate will expire within 15 days.

Method 2

Minimize the default network time-out setting. For more information about how to change the default time-out, click the following article number to view the article in the Microsoft Knowledge Base:

841632

(http://support.microsoft.com/kb/841632/ )

You receive the "403.13 client certificate revoked" error message after you install the MS04-11 security update

Method 3

For a Windows service, you can increase the default time-out setting to allow for the service to start. To do this, follow these steps:

Click Start, click Run, type regedit, and then click OK.
Locate the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
On the Edit menu, point to New, and then click DWORD Value.
Type ServicesPipeTimeout, and then press ENTER.
Right-click ServicesPipeTimeout, and then click Modify.
In the Value data box, type the desired time-out value in milliseconds (ms), and then click OK. For example, if the new service time-out should be 60 seconds, type 60000 in the Value data box.
On the File menu, click Exit.
Restart the computer.

Note You must restart the computer for the Service Control Manager to apply this change.