April 2018 update broke Chrome browser (Cryptographic Services bug)

Anonymous
2018-08-13T22:50:55+00:00

I updated to the April 2018 version of Win10 a couple months ago. It caused several issues and broke my Chrome browser completely, so I reverted back to the old version. But Microsoft forced another update on me, so I need this issue fixed somehow.

All the googling I've done says Microsoft has "fixed" this issue with the April update breaking Chrome, but I've installed all patches and they clearly haven't, not in my case. Pages simply refuse to load and time out.

I've narrowed the issue down to the "Cryptographic Services" service. If I stop the service, all of the Chrome pages instantly load and I have no issues for about an hour. It seems to be some sort of issue with certificates/SSL.

The problem is the service keeps restarting itself. I've tried setting it to "disabled," tried unchecking the service in System Configuration, nothing works. It always comes back and Chrome breaks. I'm sure there's good reason to keep it running but I'm not going to let Microsoft force me out of my favorite browser/bookmarks/extensions/etc. like this, and I can't keep stopping a service every hour just to browse the web.

So I need a solution please. And something specifically related to fixing the issue with Cryptographic Services preventing SSL on Chrome. I've done all the basic stuff like reinstalling Chrome, checking firewall settings, etc..

Windows for home | Windows 10 | Internet and connectivity

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments No comments

165 answers

Sort by: Newest
  1. Anonymous
    2019-08-13T14:14:02+00:00
    1. Open Run and type in regedit
    2. Go here: HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\
    3. Right-click ProtectedRoots > Permissions and pick your account .

        Tick Allow Full Control

    4. Right-click Root and Export 

    1. Open Task Manager > stop Cryptographic Service and Delete Root(HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates) key in Regedit.
    2. Restart your Windows.

    now change crypto services back to  NETWORK SERVICE.

    that should fix it

    good luck!  will theus

    Was this answer helpful?

    0 comments No comments
  2. Anonymous
    2019-08-13T02:28:07+00:00

    I have never posted before and probably a dumb question and maybe should not go here.  Reinstalled windows 10 home.  After install web sites were slow and would not at times load at all.  I followed advice and went to Cryptographic service log and changed the service to local.  Hind sight I should have backed up.  Internet works fine now but can not load at all some sites such as windows update.  Does anyone know the log settings to get back to Microsoft exchange instead of Local.

    Was this answer helpful?

    0 comments No comments
  3. Anonymous
    2019-08-11T19:39:46+00:00

    Kakwald asked: 

      export to where?

    The Root export is an optional, fail-safe step.  Export to any folder/file.  The Root tree is later deleted and rebuilds automatically. 

    If you're curious, you can later visually compare the export to the rebuilt data.

    Note: The core problem is the access permissions to the data, not the data values.  The export captures only the data not the permissions, so inspecting the data has minimal value - another reason why the step is optional.

    For info on how to view and capture the permissions see the full CryptSvc Registry Fix instructions.

    Was this answer helpful?

    0 comments No comments
  4. Anonymous
    2019-08-09T03:04:36+00:00

    I am having the same issue.

    That's my way i fixed:

    1. Open Run and type in regedit
    2. Go here: *HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root*
    3. Right-click ProtectedRoots > Permissionsand pick your account .

        Tick Allow Full Control

    1. Right-click Rootand Export 
    2. Open Task Manager > stop Cryptographic Serviceand Delete Root(HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates**)** key in Regedit.
    3. Restart your Windows.

    Enjoy.

    export to where?

    Was this answer helpful?

    0 comments No comments
  5. Anonymous
    2019-07-26T02:36:00+00:00

    I'm 99.99% sure I was able to fix it, since I can now update and run troubleshooter.

    After turning off the LUA in my previous post, I:

    Right clicked on start - run - typed in services.msc - right clicked on cryptographic services - properties, and then followed xTL's #27 post in the link below, and then restarted cryptographic services.

    https://www.tenforums.com/browsers-email/117046-chrome-stuck-establishing-secure-connection-all-pages-3.html#post1582688

    Was this answer helpful?

    0 comments No comments