Make sure that after renaming the catroot2 folder that you re-create a new one and set the permissions appropriately. The following command will add the cryptography service back to the permissions set:
icacls.exe c:\windows\system32\catroot2 /grant "NT SERVICE\CryptSvc:(OI)(
CI)(F)"
The other option is to run sfc.exe /scannow which will also detect that the catroot2 folder is missing and create it with the correct permissions.