.      How to articles       Windows Services       Group Policy             Donate        
Computer step by step

How to Start/Stop Cryptographic Services

Service name: CryptSvc

Display name: Cryptographic Services


Provides three management services: Catalog Database Service, which confirms the signatures of Windows files and allows new
programs to be installed; Protected Root Service, which adds and removes Trusted Root Certification Authority certificates from this
computer; and Automatic Root Certificate Update Service, which retrieves root certificates from Windows Update and enable scenarios
such as SSL. If this service is stopped, these management services will not function properly. If this service is disabled, any services that
explicitly depend on it will fail to start.

Path to executable:

C:\WINDOWS\system32\svchost.exe -k NetworkService -p

This method shows you how to Start/Stop Cryptographic Services from Command Prompt

Perform the following steps:

Please go to Start and click on the Type here to search

Type cmd, right click on cmd icon under the Programs and click on Run as administrator

Services Regedit CMD Msconfig

Please confirm User Account Control pop-up

Please select, right and copy a registry key from below, then right click on command prompt window, select Paste and press Enter

To Start Cryptographic Services service:

net start CryptSvc

sc start CryptSvc

Note: You can’t start a service if Startup type is on Disabled.

To Stop Cryptographic Services service:

net stop CryptSvc

sc stop CryptSvc

To change Startup type:


REG add "HKLM\SYSTEM\CurrentControlSet\PerfHost\CryptSvc" /v Start /t REG_DWORD /d 2 /f

sc config CryptSvc start= auto


REG add "HKLM\SYSTEM\CurrentControlSet\services\CryptSvc" /v Start /t REG_DWORD /d 3 /f

sc config CryptSvc start= demand


REG add "HKLM\SYSTEM\CurrentControlSet\services\CryptSvc" /v Start /t REG_DWORD /d 4 /f

sc config CryptSvc start= disabled

Automatic (Delayed Start):

REG add "HKLM\SYSTEM\CurrentControlSet\services\CryptSvc" /v Start /t REG_DWORD /d 2 /f

sc config CryptSvc start= delayed-auto

Note: When you change to Automatic (Delayed Start) a new key DelayedAutostart is created with value 1.

REG add "HKLM\SYSTEM\CurrentControlSet\services\CryptSvc" /v DelayedAutostart /t REG_DWORD /d 1 /f

When you change to Automatic from Automatic (Delayed Start), DelayedAutostart change value to 0.

REG add "HKLM\SYSTEM\CurrentControlSet\services\CryptSvc" /v DelayedAutostart /t REG_DWORD /d 0 /f