How to fix event viewer id 6155 LSA package is not signed as expected

Question

My pc will frequently restart at random times and whenever I check the event viewer the error that lines up with the time is "LSA package is not signed as expected." I have tried some previous fixes that I have seen others try and no luck. I'm currently on windows 11 and have factory reset my pc but nothing has worked.

Answer 1

Hello

This error indicates that LSA is unable to recognize and authenticate a user when signing in. The cause of LSA package is not signed as expected event ID 6155 can be bugs in Windows update, incompatibility with third-party programs, and unnecessary changes in registry keys.

 

Modify the Registry:

Navigate to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa.

Set the value of the registry key to: "RunAsPPL"=dword:00000001 to configure the feature with a UEFI variable.

Or "RunAsPPL"=dword:00000002 to configure the feature without a UEFI variable (only on Windows 11, 22H2).

If the registry key RunAsPPL does not exist, create it as a New DWORD (32-bit) Value and set the Hexadecimal value to 00000002.

Restart the computer.

 

Disable Credential Guard:

Open the Group Policy Editor and navigate to: Computer Configuration > Administrative Templates > System > Device Guard.

Select Device Guard. On the right pane, double-click the Turn on Virtualization Based Security policy.

In the new dialogue box, select the Disabled or Not Configured option.

Click OK to save the changes.

Close the Group Policy Editor and restart the computer.

 

Perform a Clean Boot:

This helps to determine whether a background program is interfering with your system.

 

Uninstall Recent Windows Update:

Press Windows + I to open the Settings app.

Click on Windows Update and click the Update history option.

Click the Uninstall updates button and select the most recent update.

Select Uninstall.