Windows 10 Cryptographic service high disk usage

Susan Dodds 191

Upgraded from Win 10 1909 to 2004.

Ever since, I've had high disk usage from the Cryptographic Service.

No errors, just running slow due to high disk usage.

Looking for solutions.

Thanks

Dale Kudusi 3,236 Reputation points

2020-09-04T06:31:42.037+00:00

Hi,
Was the issue resolved?
If any reply is useful for you, please accept it as answer.
If you have any issue or concern, please reply to us directly.
Best Regards.
Brian Uphoff 1 Reputation point

2021-01-23T05:48:54.38+00:00

Hello,

I'm hitting this same issue and I've been unable to update my PC for some time now.

I ran sfc /scannow and then through the steps of clean boot. After this, I ran Windows Update and my 3 pending updates (20H2, KB4586876, KB4580325) keep failing with a generic error (0x8000ffff).

-Brian
Patrick S 6 Reputation points

2021-05-17T16:12:55.787+00:00

Same issue here.
High disk usage and high CPU usage by cryptographic services.

And also for me "run sfc /scannow" does not fix this problem!

MS please support.
Thank you
TK 11 Reputation points

2021-05-20T05:46:43.24+00:00

See answer from @Darren Lathen
I had the same problem and It worked! It seems Cryptographic services keeps recreating logs on and on and on due to some error. Deleting catroot2 fixes it!
CJohnson509 16 Reputation points

2022-01-05T18:14:50.923+00:00

I manage a domain network with around 40 windows machines running 21H1. Starting on Monday (1-3-22) we've had 12 machines suddenly experience this issue, and I expect more to crop up. The solution from DarrenLathen-9492 listed below seems to work, but I wish I knew why this has suddenly become an issue for us. This is what we've been doing to fix:

Boot into safe mode
cmd > Run as Administrator > net stop CryptSvc
Go to Windows\system32 > rename or delete folder catroot2
net start CryptSvc
Restart
Aun Raza 1 Reputation point

2022-01-24T08:15:18.943+00:00

Hey CJ, i tried your method on my laptop by renaming the catroot2 folder in safe mode. However, on restart, the catroot2 folder got created again but the cryptsvc didn't use high cpu or high disk usage like before. Are your machines running smoothly since then?
Ian K 1 Reputation point

2022-12-14T14:12:43.817+00:00

I got a razer mouse and installed the software. Had performance issues until I removed the software. Task manager told me the cryptographic service was on the fritz but I know what changed and it was only that software.
Janos Garam 0 Reputation points

2023-03-10T14:40:28.9066667+00:00

It is March 2023, and the same problem still exists. Luckily, the same fix also applies (getting rid of catroot2).

Sadly, MS can't be bothered to deal properly with things like this...

11 answers

Win10user2 16 Reputation points

2020-12-13T16:34:48.907+00:00

I have the same problem using current Win 10 Home 20H2 x64 build. I ran the sfc /scannow and that found no issues. My C: drive is an SSD. Crypto service almost always churns C: drive and CPU. Resetting the service doesn't help for long. Please help. Some programs are slow in shutting down and crash (e.g. Firefox and Thunderbird) and I think the issue is the Crypto services churn. The system seems fine otherwise.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Gábor Hársfalvi 1 Reputation point

2021-04-26T07:41:48.767+00:00

I have the same problem in 2021 and still can't find any solution... All of you microsoft supporters really thats all what you can give us as help is: "run sfc /scannow".

Congratulations for your "great" operating system named windows 10. Thank you for nothing!
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Win10user2 16 Reputation points

2021-05-17T16:48:39.467+00:00

@Darren Lathen , I tried that and cannot rename or delete the directory, as it says it is open in another program, even after stopping the Cryptographic Services service. Any ideas?
Please sign in to rate this answer.
Darren Lathen 111 Reputation points

2021-05-17T16:53:31.583+00:00

Yeah, that usually means the Crypto Svc has restarted on it's own. On a couple machines, I've had to click stop service, then have a file browser open and ready so I can click the catroot2 directory immediately and delete. Delete, clear the message that it's in use, Delete, clear the message..... eventually you finally get it while the service is down.

I have NOT tried, but my next step would have been to set the service to disabled, stop it, delete the folder, re-enable and restart. I always managed to get it to go before I got that desperate.

Win10user2 16 Reputation points

2021-05-17T17:02:09.673+00:00

I tried 15 times and can't rename or delete it after stopping service and disabling service startup, or setting it to manual, and also changing it to "take no action" if service fails.

Perhaps the folder is also used by another service?

Darren Lathen 111 Reputation points

2021-05-17T20:38:00.89+00:00

Sorry, on that I'm not sure. I fortunately have not run into that issue.

We did have a couple we had to disable Carbon Black on in order to get far enough in (the PC was almost totally unresponsive) but I don't know if you're using that. I want to say the service is part of Windows update functionality, so perhaps if there is an update pending restart or installing, maybe you have to let that run it's course first? I'm just grasping at straws though. I know it is an incredibly frustrating issues and MS doesn't offer anything in terms of support for what is clearly a common issue with their OS.

Abin 1 Reputation point

2021-07-05T12:05:29.753+00:00

Please try to do the same from Safe mode.

planebagel 1 Reputation point

2021-10-16T21:37:36.14+00:00

I had the same problem. I opened the tsk manager using ctl+alt+del and just kept repeatedly shutting down cryptographic services until the folder was deleted
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Win10user2 16 Reputation points

2021-05-17T20:39:07.53+00:00

Thank you very much for your suggestions! :-)
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Joe Grube 1 Reputation point

2021-05-20T09:55:16.287+00:00

I have been chasing this issue for a month and the fixes discussed here resolved the problem. Specifically, stopping the service and deleting catroot2 folder. Thank you!
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Windows 10 Cryptographic service high disk usage

11 answers

Your answer