April 2018 update broke Chrome browser (Cryptographic Services bug)

Anonymous
2018-08-13T22:50:55+00:00

I updated to the April 2018 version of Win10 a couple months ago. It caused several issues and broke my Chrome browser completely, so I reverted back to the old version. But Microsoft forced another update on me, so I need this issue fixed somehow.

All the googling I've done says Microsoft has "fixed" this issue with the April update breaking Chrome, but I've installed all patches and they clearly haven't, not in my case. Pages simply refuse to load and time out.

I've narrowed the issue down to the "Cryptographic Services" service. If I stop the service, all of the Chrome pages instantly load and I have no issues for about an hour. It seems to be some sort of issue with certificates/SSL.

The problem is the service keeps restarting itself. I've tried setting it to "disabled," tried unchecking the service in System Configuration, nothing works. It always comes back and Chrome breaks. I'm sure there's good reason to keep it running but I'm not going to let Microsoft force me out of my favorite browser/bookmarks/extensions/etc. like this, and I can't keep stopping a service every hour just to browse the web.

So I need a solution please. And something specifically related to fixing the issue with Cryptographic Services preventing SSL on Chrome. I've done all the basic stuff like reinstalling Chrome, checking firewall settings, etc..

Windows for home | Windows 10 | Internet and connectivity

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

165 answers

Sort by: Oldest
Most helpful Newest Oldest
  1. Anonymous
    2019-07-19T01:24:05+00:00

    I Left Caps ON:  Changing the CryptSvc logon to 'local system' is a known bad fix, causing the problems you describe.  See my June 07, 2019 reply and read forward from there. 

    You need to undo the account change and use one of the other 2 fixes:

    a) (simplest) Get the .reg file and apply by clicking on it - that disables personal trusted certificates, which very few people need.  Use **CA HKLM_Pol_PR-DisableCA.reg,**attached to Chrome bug report:  CR838707 comment #213

    b) Apply the 4 step registry cleanup for HKEY_CURRENT_USER...ProtectedRoots mentioned repeatedly here.

    I got the CA HKLM_Pol_PR-DisableCA.regfrom the link.****

    I'm attempting the steps mentioned by Peter Nover, but when I tick allow full control, if I click Ok, I get a message saying "Unable to save permission changes on ProtectedRoots. Access is denied."

    Was this answer helpful?

    0 comments
  2. Anonymous
    2019-07-19T01:55:34+00:00

    hat's my way i fixed:

    1. Open Run and type in regedit
    2. Go here: HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\
    3. Right-click ProtectedRoots > Permissions and pick your account .

        Tick Allow Full Control

    4. Right-click Root and Export 

    1. Open Task Manager > stop Cryptographic Service and Delete Root(HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates) key in Regedit.
    2. Restart your Windows.

    Was this answer helpful?

    0 comments
  3. Anonymous
    2019-07-19T02:07:08+00:00

    hat's my way i fixed:

    1. Open Run and type in regedit
    2. Go here: HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates\Root\
    3. Right-click ProtectedRoots > Permissions and pick your account .

        Tick Allow Full Control

    4. Right-click Root and Export 

    1. Open Task Manager > stop Cryptographic Service and Delete Root(HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates) key in Regedit.
    2. Restart your Windows.

    I'm stuck at step 3. After I tick allow full control and click ok, it tells me access is denied.

    Was this answer helpful?

    0 comments
  4. Anonymous
    2019-07-19T14:04:17+00:00

    click on advanced. change owner in ADMINISTRATORS.  than  go back and add your account and administrators and then click full permission.

    now  you can  export Root and delete it. 

    good luck it really worked for me.

    Was this answer helpful?

    0 comments
  5. Anonymous
    2019-07-19T23:28:26+00:00

    click on advanced. change owner in ADMINISTRATORS.  than  go back and add your account and administrators and then click full permission.

    now  you can  export Root and delete it. 

    good luck it really worked for me.

    Thanks, but I don't think I know how to do that. I clicked on advanced, found the "owner" part, but don't know how to change it. Am I at least in the right spot?

    Was this answer helpful?

    0 comments