Windows 10 Cryptographic service high disk usage

Susan Dodds 211

Upgraded from Win 10 1909 to 2004.

Ever since, I've had high disk usage from the Cryptographic Service.

No errors, just running slow due to high disk usage.

Looking for solutions.

Thanks

Dale Kudusi 3,251 Reputation points

2020-09-04T06:31:42.037+00:00

Hi,
Was the issue resolved?
If any reply is useful for you, please accept it as answer.
If you have any issue or concern, please reply to us directly.
Best Regards.
Brian Uphoff 1 Reputation point

2021-01-23T05:48:54.38+00:00

Hello,

I'm hitting this same issue and I've been unable to update my PC for some time now.

I ran sfc /scannow and then through the steps of clean boot. After this, I ran Windows Update and my 3 pending updates (20H2, KB4586876, KB4580325) keep failing with a generic error (0x8000ffff).

-Brian
Willem van Ede 11 Reputation points

2021-01-28T20:05:39.553+00:00

Same problem here,
Cryptograpic Services taking lots of disk usage after update to 20H2 yesterday.

0x8000ffff on KB4580325

sfc /scannow halts on "Verification 100% complete"

Drivers like NVIDIA not running...

Any help?
Patrick S 6 Reputation points

2021-05-17T16:12:55.787+00:00

Same issue here.
High disk usage and high CPU usage by cryptographic services.

And also for me "run sfc /scannow" does not fix this problem!

MS please support.
Thank you
Win10user2 16 Reputation points

2021-05-17T16:48:39.467+00:00

@Darren Lathen , I tried that and cannot rename or delete the directory, as it says it is open in another program, even after stopping the Cryptographic Services service. Any ideas?
Darren Lathen 111 Reputation points

2021-05-17T16:53:31.583+00:00

Yeah, that usually means the Crypto Svc has restarted on it's own. On a couple machines, I've had to click stop service, then have a file browser open and ready so I can click the catroot2 directory immediately and delete. Delete, clear the message that it's in use, Delete, clear the message..... eventually you finally get it while the service is down.

I have NOT tried, but my next step would have been to set the service to disabled, stop it, delete the folder, re-enable and restart. I always managed to get it to go before I got that desperate.
Win10user2 16 Reputation points

2021-05-17T17:02:09.673+00:00

I tried 15 times and can't rename or delete it after stopping service and disabling service startup, or setting it to manual, and also changing it to "take no action" if service fails.

Perhaps the folder is also used by another service?
Darren Lathen 111 Reputation points

2021-05-17T20:38:00.89+00:00

Sorry, on that I'm not sure. I fortunately have not run into that issue.

We did have a couple we had to disable Carbon Black on in order to get far enough in (the PC was almost totally unresponsive) but I don't know if you're using that. I want to say the service is part of Windows update functionality, so perhaps if there is an update pending restart or installing, maybe you have to let that run it's course first? I'm just grasping at straws though. I know it is an incredibly frustrating issues and MS doesn't offer anything in terms of support for what is clearly a common issue with their OS.
Win10user2 16 Reputation points

2021-05-17T20:39:07.53+00:00

Thank you very much for your suggestions! :-)
TK 11 Reputation points

2021-05-20T05:46:43.24+00:00

See answer from @Darren Lathen
I had the same problem and It worked! It seems Cryptographic services keeps recreating logs on and on and on due to some error. Deleting catroot2 fixes it!
Abin 1 Reputation point

2021-07-05T12:05:29.753+00:00

Please try to do the same from Safe mode.
planebagel 1 Reputation point

2021-10-16T21:37:36.14+00:00

I had the same problem. I opened the tsk manager using ctl+alt+del and just kept repeatedly shutting down cryptographic services until the folder was deleted
CJohnson509 16 Reputation points

2022-01-05T18:14:50.923+00:00

I manage a domain network with around 40 windows machines running 21H1. Starting on Monday (1-3-22) we've had 12 machines suddenly experience this issue, and I expect more to crop up. The solution from DarrenLathen-9492 listed below seems to work, but I wish I knew why this has suddenly become an issue for us. This is what we've been doing to fix:

Boot into safe mode
cmd > Run as Administrator > net stop CryptSvc
Go to Windows\system32 > rename or delete folder catroot2
net start CryptSvc
Restart
Aun Raza 1 Reputation point

2022-01-24T08:15:18.943+00:00

Hey CJ, i tried your method on my laptop by renaming the catroot2 folder in safe mode. However, on restart, the catroot2 folder got created again but the cryptsvc didn't use high cpu or high disk usage like before. Are your machines running smoothly since then?
Ian K 1 Reputation point

2022-12-14T14:12:43.817+00:00

I got a razer mouse and installed the software. Had performance issues until I removed the software. Task manager told me the cryptographic service was on the fritz but I know what changed and it was only that software.
Janos Garam 0 Reputation points

2023-03-10T14:40:28.9066667+00:00

It is March 2023, and the same problem still exists. Luckily, the same fix also applies (getting rid of catroot2).

Sadly, MS can't be bothered to deal properly with things like this...

11 answers

Deleted

This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Comments have been turned off. Learn more

Share via

Windows 10 Cryptographic service high disk usage

11 answers

Your answer