Share via

LSA Event Viewer Event ID 6155

Frank M 0 Reputation points
2024-02-06T23:05:21.6566667+00:00

Getting an LSA Event Viewer Event ID 6155 warning and it says LSA package is not signed in as expected. This can cause unexpected behaviour with credential guard. Getting the following package names from the several different warnings of the same ID 6155: msv1_0, sfapm, schannel, wdigest, cloudap, pku2u

Windows 11
Windows 11
A Microsoft operating system designed for productivity, creativity, and ease of use.
8,349 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Hania Lian 8,306 Reputation points Microsoft Vendor
    2024-02-08T06:33:14.9933333+00:00

    Hello, Thank you for posting in Q&A forum. LSA event ID 6155 indicates an issue with signing of LSA packages, which can potentially impact Credential Guard, which helps protect domain credentials. Please kindly follow below steps to do basic troubleshooting: 1.Check if any user credential is changed/removed. 2.Open CMD window and run sfc /scannow to repair any corrupted system files. 3.Go to Windows Security -> Device security -> Local Security Authority protection and check this option. 4.If there's any Windows Update, pls try to roll back or update to latest version and see if it works. Best Regards, Hania Lian

    ---If the Answer is helpful, please click "Accept Answer" and upvote it.

    0 comments