How to fix LSA package is not signed as expected event log entries?

Anonymous
2022-09-21T15:03:13+00:00

The home (non-work) desktop was upgraded yesterday to Windows 11 Pro 22H2 and afterwards on every boot there are several errors about LSA package is not signed as expected. How do I fix these errors? The desktop has Secure boot enabled with virtual based security enabled for memory protection. The CPU is an Intel i7 8700K, which meets Microsoft's requirements for Windows 11.

Windows for home | Windows 11 | Security and privacy

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question.

0 comments

85 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2023-04-01T01:14:54+00:00

    That error is because Credential Guard is licensed only for Enterprise and Education version of Windows 11. Change your KEY to an Enterprise version of Windows

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  2. Anonymous
    2023-03-15T06:24:02+00:00

    I’ve tried the new admin account ‘solution’ before. Did not work for any of my Pro machines.

    In my case not a corrupt profile.

    Unrelated to Windows Updates as well, in my case.

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  3. Anonymous
    2023-02-23T12:34:36+00:00

    Unfortunately, the problem still exists.

    My laptop stated to show the same problem today.

    11 Pro

    Build: 22621.1265

    Fresh install on 2023-01-03

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  4. Anonymous
    2023-01-16T07:01:37+00:00

    Each time my PC boot I also have 10 event Warnings ID 6155 "LSA package is not signed as expected. This can cause unexpected behavior with Credential Guard" with the paquets: msv1_0, sfapm, schannel, wdigest, cloudap, pku2u, tspkg, msv1_0, kerberos, negoexts.

    And I have an event Error ID 28 Kernel Event Tracing "provider {77811378-e885-4ac2-a580-bc86e4f1bc93}. Error: 0xC0000005" that seems related with the warning because it is caused by the running process Lsalso.exe (Credential Guard & VBS Key Isolation"

    In Regedit, I have HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.

    I have fixed:

    "RunAsPPL"=dword:00000001

    Any ideas???

    Exact same issues - Win 11 Pro 22H2. AMD 2700X.

    I have tried all the troubleshooting options provided in this thread and elsewhere.

    Errors persist but fortunately do not appear to impact the system

    Was this answer helpful?

    2 people found this answer helpful.
    0 comments
  5. Anonymous
    2022-10-17T21:05:53+00:00

    I use a pin on this machine (changed it), and the MS Authenticator for the account (the account is a "Passwordless account")

    I have no local users on this machine

    These events occur only after a reboot

    Was this answer helpful?

    1 person found this answer helpful.
    0 comments