In windows 11 enterprise edition, I have events 103 AESMService: Platform Services initialization failed due to DAL error. How to stop these messages?

Anonymous
2024-03-15T14:26:35+00:00

I'm running an hp all-in-one and am getting event id 103, AESMService: Platform Services initialization failed due to DAL error. I believe I have followed all the usual steps to resolve to no avail., including:

sfc /scannow

DISM /Online /Cleanup-Image /RestoreHealth

chkdsk

I still have the same error this morning,

<Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">

  • <System> <Provider Name="AESMService" Guid="{ce6e83d3-a7d9-4a91-96e0-e018ad574610}" /><EventID>103</EventID><Version>0</Version><Level>3</Level><Task>0</Task><Opcode>0</Opcode><Keywords>0x8000000000000000</Keywords><TimeCreated SystemTime="2024-03-15T14:09:00.0176140Z" /><EventRecordID>190</EventRecordID><Correlation /><Execution ProcessID="1864" ThreadID="7900" /><Channel>SGX/Admin</Channel><Computer>DESKTOP-ENSLEYS</Computer><Security UserID="S-1-5-18" /></System>
  • <EventData> <Data Name="attrUnicodeString">Platform Services initialization failed due to DAL error</Data></EventData> </Event>

I also have an error 28,

<Event xmlns="**http://schemas.microsoft.com/win/2004/08/events/event**">

  • <System> <Provider Name="Microsoft-Windows-Kernel-EventTracing" Guid="{b675ec37-bdb6-4648-bc92-f3fdc74d3ca2}" /><EventID>28</EventID><Version>0</Version><Level>2</Level><Task>3</Task><Opcode>25</Opcode><Keywords>0x8000000000000a20</Keywords><TimeCreated SystemTime="2024-03-15T14:06:50.4097255Z" /><EventRecordID>30</EventRecordID><Correlation /><Execution ProcessID="968" ThreadID="972" /><Channel>Microsoft-Windows-Kernel-EventTracing/Admin</Channel><Computer>DESKTOP-ENSLEYS</Computer><Security UserID="S-1-5-18" /></System>
  • <EventData> <Data Name="ProviderGuid">{77811378-e885-4ac2-a580-bc86e4f1bc93}</Data><Data Name="ErrorCode">3221225477</Data></EventData> </Event>

This has been persistent and I have tried everything to fix it.

Any help on steps to solve these issues would be greatly appreciated.

Thank you!

***moved from Windows / Windows 11 / Performance and system failures***

Windows for business | Windows Client for IT Pros | User experience | Remote desktop services and terminal services

Locked Question. This question was migrated from the Microsoft Support Community. You can vote on whether it's helpful, but you can't add comments or replies or follow the question. To protect privacy, user profiles for migrated questions are anonymized.

0 comments No comments
{count} votes

16 answers

Sort by: Most helpful
  1. Anonymous
    2024-03-16T11:29:41+00:00

    Did you install the Dynamic Application Loader driver?

    have you enabled intel sgx in bios, and installed the latest intel sgx driver?

    Intel ME components driver contains DAL driver

    1 person found this answer helpful.
    0 comments No comments
  2. Anonymous
    2024-03-16T21:11:16+00:00

    Progress after installing Intel ME components, enabling intel sgx in bios. I had to replace the repository files with the ones in the install folder for Intel_SGX_PSW_for_Windows_v2.22.100.2, which required me to correct the permissions to enable this because the asem_service.exe in the repository did not match the one in the folder. This might be caused by an incorrect installation method. There was no installer for the indel SGX driver on the Intel site.

    Maybe this is not the way to install the Intel SGX driver, since I am still getting the ASM error in my log. However I have the installation folder on my desktop folder which has the files:

    The repository files are in the third folder.

    Plus now I am now getting new WMI 63 errors and still have to worry about the error 28.

    Now will run again

    sfc / scannow

    and DISM tool to dee I I can get rid of these new errors.

    1 person found this answer helpful.
    0 comments No comments
  3. Anonymous
    2024-03-18T16:48:42+00:00

    I have verified error is intermittent and continues sometimes even with Intel SGX drivers, InTel ME DAL components installed.

    0 comments No comments
  4. Anonymous
    2024-03-18T17:55:27+00:00

    I have collected old versions of Intel sgx .

    Do you want to try to those

    0 comments No comments
  5. Anonymous
    2024-03-18T18:44:22+00:00

    Sure. I need the one that comes from Hewlett Packard (if you have it) because everyone says to use the Intel SGX driver provided by your computer manufacturer.

    My system is an HP All-in-One 22-c000a.

    My plan at this point is to reinstall windows 11, being careful NOT to edit the registry in order to "fix" supposed errors. Many of these warnings and messages in the event viewer can be limited using filters, and I have a list of things that I do to "fix" these errors. I have reinstalled at least 4 times already, but each time I had to change the permissions somewhere in the registry, and changed ownership from TrustedInstaller to Administrators. But I believe that this might be corrupting the correct functioning of the registry leading to the issue.

    I upgraded from Windows 11 home, to Windows 11 Pro, to Windows 11 Enterprise. I do not customize (personalize it) until I am at Windows 11 Enterprise, so no modifications of the registry or attempts to "solve" issues until Windows 11 Enterprise is virgin installed. I have Intel SGX enabled in the system BIOS, Credential guard, and Memory integrity are on.

    I've tried these methods in fixing issues:

    1. Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc Set delayedautostart to 0. This eliminates the windows.security.center warnings events 10010.
    2. In the WMI autologger section, the following event ID's were disabled from being logged (WMI event 63):

    2.1 Event 6155 which are 10 different LSA warning messages that I could not get to stop.

    Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-System{199fe037-2b82-40a9-82ac-e1d46c792b99}

    2.2 Event 360 Windows Hello, which is not physically supported by my PC so to suppress. Since some aspects of Windows Hello can not be installed on this machine, the warning issues always, by design. So it is benign.

    Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WMI\Autologger\EventLog-Application{23b8d46b-67dd-40a3-b636-d43e50552c6d}.

    Otherwise this warning will continually fire.

    1. Event WMI 63 disabled WMI logging. Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Wbem\CIMOM\Logging set to 0
    2. The WLAN error 10002 regarding Rtlihvs.dll by removing the IHVExtensions key that is in the non-depository area of the registry under the currentcontrol section
    3. Removed the Windows.Client.WebExperience package via PowerShell (admin)

    winget\ uninstall “windows web experience pack”

    Let me know if you need more information.

    My basic system information file contents are here:

    =================================

    System Information report written at: 03/18/24 11:19:43

    System Name: DESKTOP-ENSLEYS

    [System Summary]

    Item Value

    OS Name Microsoft Windows 11 Enterprise

    Version 10.0.22631 Build 22631

    Other OS Description Not Available

    OS Manufacturer Microsoft Corporation

    System Name DESKTOP-ENSLEYS

    System Manufacturer HP

    System Model HP All-in-One 22-c0xx

    System Type x64-based PC

    System SKU 3LB93AA#ABA

    Processor Intel(R) Celeron(R) G4900T CPU @ 2.90GHz, 2904 Mhz, 2 Core(s), 2 Logical Processor(s)

    BIOS Version/Date AMI F.33, 8/23/2023

    SMBIOS Version 3.2

    Embedded Controller Version 3.12

    BIOS Mode UEFI

    BaseBoard Manufacturer HP

    BaseBoard Product 8446

    BaseBoard Version 0000

    Platform Role Desktop

    Secure Boot State On

    PCR7 Configuration Binding Possible

    Windows Directory C:\Windows

    System Directory C:\Windows\system32

    Boot Device \Device\HarddiskVolume1

    Locale United States

    Hardware Abstraction Layer Version = "10.0.22621.2506"

    User Name DESKTOP-ENSLEYS\Don

    Time Zone Pacific Daylight Time

    Installed Physical Memory (RAM) 4.00 GB

    Total Physical Memory 3.78 GB

    Available Physical Memory 231 MB

    Total Virtual Memory 5.15 GB

    Available Virtual Memory 1.06 GB

    Page File Space 1.38 GB

    Page File C:\pagefile.sys

    Kernel DMA Protection Off

    Virtualization-based security Running

    Virtualization-based security Required Security Properties

    Virtualization-based security Available Security Properties Base Virtualization Support, Secure Boot, DMA Protection, Secure Memory Overwrite, UEFI Code Readonly, SMM Security Mitigations 1.0, Mode Based Execution Control

    Virtualization-based security Services Configured

    Virtualization-based security Services Running Credential Guard, Hypervisor enforced Code Integrity

    Windows Defender Application Control policy Enforced

    Windows Defender Application Control user mode policy Audit

    Device Encryption Support Reasons for failed automatic device encryption: Hardware Security Test Interface failed and device is not Modern Standby, Un-allowed DMA capable bus/device(s) detected, WinRE is not configured

    A hypervisor has been detected. Features required for Hyper-V will not be displayed.

    1 person found this answer helpful.
    0 comments No comments