The Lsass.exe process crashes when you sign in to Lync 2010 to load a certificate from roaming profiles in Windows

Symptoms

Consider the following scenario:

  • You previously used a Windows XP-based client computer.

  • You configure your account to use roaming profiles to log on to a client computer that is running Windows 7, Windows Server 2008 R2, Windows Vista, or Windows Server 2008.

  • You sign in to Microsoft Lync 2010 to load the certificate from the roaming profile.

In this scenario, the Local Security Authority Subsystem Service (Lsass.exe) process crashes.

Note This issue occurs when you run any application that calls the CredWrite function by using a CRED_TYPE_GENERIC_CERTIFICATE type credential.

Additionally, this issue also occurs when Credential Management (CredMan) loads Microsoft Office Communication Server (OCS) certificates from the roaming profile.

Resolution

Hotfix information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing the problem described in this article. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft website:

http://support.microsoft.com/contactus/?ws=supportNote The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this hotfix, you must be running one of the following operating systems:

  • Windows 7 Service Pack 1 (SP1)

  • Windows Server 2008 R2 Service Pack 1 (SP1)

  • Windows Vista Service Pack 2 (SP2)

  • Windows Server 2008 SP2

For more information about how to obtain a Windows 7 or Windows Server 2008 R2 service pack, click the following article number to view the article in the Microsoft Knowledge Base:

976932 Information about Service Pack 1 for Windows 7 and for Windows Server 2008 R2

For more information about how to obtain a Windows Vista service pack, click the following article number to view the article in the Microsoft Knowledge Base:

935791 How to obtain the latest Windows Vista service pack For more information about how to obtain a Windows Server 2008 service pack, click the following article number to view the article in the Microsoft Knowledge Base:

968849 How to obtain the latest service pack for Windows Server 2008

Registry information

To apply this hotfix, you do not have to make any changes to the registry.

Restart requirement

You must restart the computer after you apply this hotfix.

Hotfix replacement information

This hotfix does not replace a previously released hotfix.

The global version of this hotfix installs files that have the attributes that are listed in the following tables. The dates and the times for these files are listed in Coordinated Universal Time (UTC). The dates and the times for these files on your local computer are displayed in your local time together with your current daylight saving time (DST) bias. Additionally, the dates and the times may change when you perform certain operations on the files.

Windows 7 and Windows Server 2008 R2 file information notes

Important Windows 7 hotfixes and Windows Server 2008 R2 hotfixes are included in the same packages. However, hotfixes on the Hotfix Request page are listed under both operating systems. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows 7/Windows Server 2008 R2" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

  • The files that apply to a specific product, milestone (RTM, SPn), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table:

    Version

    Product

    Milestone

    Service branch

    6.1.760
    1.21xxx

    Windows 7 and Windows Server 2008 R2

    SP1

    LDR

  • GDR service branches contain only those fixes that are widely released to address widespread, critical issues. LDR service branches contain hotfixes in addition to widely released fixes.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separately in the "Additional file information for Windows 7 and for Windows Server 2008 R2" section. MUM and MANIFEST files, and the associated security catalog (.cat) files, are critical to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows 7

File name

File version

File size

Date

Time

Platform

Cng.sys

6.1.7601.21971

369,352

19-Apr-2012

04:34

x86

Ksecdd.sys

6.1.7601.21971

67,440

19-Apr-2012

04:36

x86

Ksecpkg.sys

6.1.7601.21971

134,000

19-Apr-2012

04:36

x86

Lsasrv.dll

6.1.7601.21971

1,038,848

19-Apr-2012

04:28

x86

Lsasrv.mof

Not applicable

13,780

12-Nov-2010

23:53

Not applicable

Lsass.exe

6.1.7601.21971

22,528

19-Apr-2012

04:26

x86

Secur32.dll

6.1.7601.21971

22,016

19-Apr-2012

04:31

x86

Sspicli.dll

6.1.7601.21971

100,352

19-Apr-2012

04:31

x86

Sspisrv.dll

6.1.7601.21971

15,872

19-Apr-2012

04:31

x86

Schannel.dll

6.1.7601.21971

224,768

19-Apr-2012

04:31

x86

For all supported x64-based versions of Windows 7 and of Windows Server 2008 R2

File name

File version

File size

Date

Time

Platform

Cng.sys

6.1.7601.21971

459,232

19-Apr-2012

05:26

x64

Ksecdd.sys

6.1.7601.21971

95,600

19-Apr-2012

05:28

x64

Ksecpkg.sys

6.1.7601.21971

152,432

19-Apr-2012

05:28

x64

Lsasrv.dll

6.1.7601.21971

1,446,400

19-Apr-2012

05:20

x64

Lsasrv.mof

Not applicable

13,780

12-Nov-2010

23:50

Not applicable

Lsass.exe

6.1.7601.21971

31,232

19-Apr-2012

05:17

x64

Secur32.dll

6.1.7601.21971

28,160

19-Apr-2012

05:22

x64

Sspicli.dll

6.1.7601.21971

136,192

19-Apr-2012

05:23

x64

Sspisrv.dll

6.1.7601.21971

29,184

19-Apr-2012

05:23

x64

Schannel.dll

6.1.7601.21971

340,992

19-Apr-2012

05:22

x64

Lsasrv.mof

Not applicable

13,780

12-Nov-2010

23:53

Not applicable

Secur32.dll

6.1.7601.21971

22,016

19-Apr-2012

04:31

x86

Sspicli.dll

6.1.7601.21971

96,768

19-Apr-2012

04:25

x86

Schannel.dll

6.1.7601.21971

224,768

19-Apr-2012

04:31

x86

For all supported IA-64-based versions of Windows Server 2008 R2

File name

File version

File size

Date

Time

Platform

Cng.sys

6.1.7601.21971

787,504

19-Apr-2012

04:26

IA-64

Ksecdd.sys

6.1.7601.21971

179,568

19-Apr-2012

04:28

IA-64

Ksecpkg.sys

6.1.7601.21971

307,568

19-Apr-2012

04:28

IA-64

Lsasrv.dll

6.1.7601.21971

2,656,256

19-Apr-2012

04:20

IA-64

Lsasrv.mof

Not applicable

13,780

12-Nov-2010

23:52

Not applicable

Lsass.exe

6.1.7601.21971

56,320

19-Apr-2012

04:17

IA-64

Secur32.dll

6.1.7601.21971

48,640

19-Apr-2012

04:23

IA-64

Sspicli.dll

6.1.7601.21971

275,456

19-Apr-2012

04:23

IA-64

Sspisrv.dll

6.1.7601.21971

46,080

19-Apr-2012

04:23

IA-64

Schannel.dll

6.1.7601.21971

647,680

19-Apr-2012

04:23

IA-64

Lsasrv.mof

Not applicable

13,780

12-Nov-2010

23:53

Not applicable

Secur32.dll

6.1.7601.21971

22,016

19-Apr-2012

04:31

x86

Sspicli.dll

6.1.7601.21971

96,768

19-Apr-2012

04:25

x86

Schannel.dll

6.1.7601.21971

224,768

19-Apr-2012

04:31

x86



Windows Vista and Windows Server 2008 file information notes


Important Windows Vista hotfixes and Windows Server 2008 hotfixes are included in the same packages. However, only "Windows Vista" is listed on the Hotfix Request page. To request the hotfix package that applies to one or both operating systems, select the hotfix that is listed under "Windows Vista" on the page. Always refer to the "Applies To" section in articles to determine the actual operating system that each hotfix applies to.

  • The files that apply to a specific product, SR_Level (RTM, SP n ), and service branch (LDR, GDR) can be identified by examining the file version numbers as shown in the following table.

  • The MANIFEST files (.manifest) and the MUM files (.mum) that are installed for each environment are listed separatelyin the "Additional file information for Windows Server 2008 and for Windows Vista" section. MUM files and MANIFEST files, and the associated security catalog (.cat) files, are extremely important to maintaining the state of the updated component. The security catalog files, for which the attributes are not listed, are signed with a Microsoft digital signature.

For all supported x86-based versions of Windows Server 2008 and of Windows Vista

File name

File version

File size

Date

Time

Platform

Ksecdd.sys

6.0.6002.23105

440,680

21-Feb-2014

07:42

x86

Lsasrv.dll

6.0.6002.23393

1,262,080

13-May-2014

08:55

x86

Lsasrv.mof

Not applicable

13,780

21-Feb-2014

07:44

Not applicable

Lsass.exe

6.0.6002.23393

9,728

13-May-2014

07:36

x86

Secur32.dll

6.0.6002.23393

72,704

13-May-2014

08:57

x86

Wdigest.dll

6.0.6002.23393

175,616

13-May-2014

08:57

x86

Msv1_0.dll

6.0.6002.23393

218,624

13-May-2014

08:55

x86

Schannel.dll

6.0.6002.23393

279,552

13-May-2014

08:57

x86



For all supported x64-based versions of Windows Server 2008 and of Windows Vista

File name

File version

File size

Date

Time

Platform

Ksecdd.sys

6.0.6002.23105

517,480

21-Feb-2014

07:56

x64

Lsasrv.dll

6.0.6002.23393

1,693,184

13-May-2014

09:46

x64

Lsasrv.mof

Not applicable

13,780

21-Feb-2014

08:00

Not applicable

Lsass.exe

6.0.6002.23393

11,264

13-May-2014

08:18

x64

Secur32.dll

6.0.6002.23393

94,720

13-May-2014

09:48

x64

Wdigest.dll

6.0.6002.23393

205,824

13-May-2014

09:49

x64

Msv1_0.dll

6.0.6002.23393

269,312

13-May-2014

09:47

x64

Schannel.dll

6.0.6002.23393

348,160

13-May-2014

09:48

x64

Lsasrv.mof

Not applicable

13,780

21-Feb-2014

07:44

Not applicable

Secur32.dll

6.0.6002.23393

77,312

13-May-2014

08:58

x86

Wdigest.dll

6.0.6002.23393

175,616

13-May-2014

08:57

x86

Msv1_0.dll

6.0.6002.23393

218,624

13-May-2014

08:55

x86

Schannel.dll

6.0.6002.23393

279,552

13-May-2014

08:57

x86



For all supported IA-64-based versions of Windows Server 2008

File name

File version

File size

Date

Time

Platform

Ksecdd.sys

6.0.6002.23105

1,030,504

21-Feb-2014

07:50

IA-64

Lsasrv.dll

6.0.6002.23393

3,265,024

13-May-2014

08:29

IA-64

Lsasrv.mof

Not applicable

13,780

21-Feb-2014

07:52

Not applicable

Lsass.exe

6.0.6002.23393

17,920

13-May-2014

07:20

IA-64

Secur32.dll

6.0.6002.23393

202,752

13-May-2014

08:31

IA-64

Wdigest.dll

6.0.6002.23393

483,328

13-May-2014

08:32

IA-64

Msv1_0.dll

6.0.6002.23393

570,368

13-May-2014

08:30

IA-64

Schannel.dll

6.0.6002.23393

812,032

13-May-2014

08:31

IA-64

Lsasrv.mof

Not applicable

13,780

21-Feb-2014

07:44

Not applicable

Secur32.dll

6.0.6002.23393

77,312

13-May-2014

08:58

x86

Wdigest.dll

6.0.6002.23393

175,616

13-May-2014

08:57

x86

Msv1_0.dll

6.0.6002.23393

218,624

13-May-2014

08:55

x86

Schannel.dll

6.0.6002.23393

279,552

13-May-2014

08:57

x86





Status

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.

More Information

For more information about the Credential, visit the following Microsoft websites:

General information about the Credential structure

General information about the CredMarshalCredential function

General information about Credential Management with the .NET Framework 2.0

General information about the CredWrite functionFor more information about roaming user profiles, visit the following Microsoft website:

General information about the roaming user profilesFor more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base:

824684 Description of the standard terminology that is used to describe Microsoft software updates

Additional file information

Need more help?

Expand your skills
Explore Training
Get new features first
Join Microsoft Insiders

Was this information helpful?

Thank you for your feedback!

Thank you for your feedback! It sounds like it might be helpful to connect you to one of our Office support agents.

×