[Solved] Chrome doesn't load any websites after update Windows with CryptSvc problem

The problem started with the April 2018 Win10 1803 Feature Update and can also happen with fresh Windows installs that use 1803. It is an (unknown) artifact of how Windows is installed or updated. The 1803 update can cause a core Windows identity service (CryptSvc) to loop endlessly and stall connections.

First verify you have the CryptSvc problem:

- Before opening Chrome, open Edge

• If Chrome works OK, but only if Edge is also running -> this is very likely a CryptSvc issue.
• If not, you may have another problem.

- To verify the CryptSvc loop explicitly

• start Chrome without Edge.
• while Chrome is stalled (and CryptSvc is looping), verify CryptSvc high CPU usage - it's normally quiet
• in Task Manager> Services, select CryptSvc, then right click for Details, (CryptSvc runs as an svchost task with matching PID)
• check the svchost CPU column, if > 2%, proceed with the registry repair.

The problem can be fixed (temporarily) by restarting the CryptSvc service from task manager. To check if you need the registry repair, you can watch your CryptSvc CPU usage. Check Task Manager> Services, find CryptSvc, right click, go Details, check CPU. CryptSvc runs as an svchost task with a matching Details PID that shows the CPU usage (available from Details). Any sustained CPU usage is high. It runs briefly at Windows startup and then briefly as needed - it's normally quiet.

CryptSvc Registry Repair Script

Here's a scripted CryptSvc registry repair, that avoids the downsides from changing the CryptSvc logon account.

1. It uses a third party admin tool, SetACL.exe, which you can download here.  This is a well established tool and seems to be safe.  As always, use your own judgement.  Get the EXE version. The download is a .zip file, drag & drop (64bit) SetACL.exe to a work directory.

Then download the powerShell script files to the same work directory:

• CryptSvcAdminSetAclFix.ps1: Click Here
• CryptSvcAdminSetAclFix.ps1.log : Click Here

2. Open Windows PowerShell (Run as Administrator)

3. If you haven't used PowerShell before, you need to enable downloaded scripts with command

(without PS C:\WINDOWS\system32>):

PS C:\WINDOWS\system32> set-ExecutionPolicy Unrestricted

   (Reply A when prompted)

When finished restore the protected policy with

PS C:\WINDOWS\system32> set-ExecutionPolicy Undefined

To view the policy settings use

PS C:\WINDOWS\system32>  get-ExecutionPolicy -list

4. Change to your directory with

PS C:\WINDOWS\system32> cd [YourDirectoryPath]

For example, if directory is Desktop: PS C:\WINDOWS\system32> cd ~\Desktop

You need to run the script from the same directory where SetACL.exe is located!!!

The directory is also used for logs and registry snapshots.

5. Invoke the script with:

   PS C:\Users\DownloaderGa\Desktop> .\CryptSvcAdminSetAclFix.ps1

in the Adminstrator: PowerShell console.

• If success, will be:

Start logging to C:\Users\DownloaderGa\Desktop\CryptSvcAdminSetAclFix.ps1.log Needs: PowerShell runAs admin with Set-ExecutionPolicy Unrestricted (Reply R when prompted) and SetACL.exe in current folder Uses script folder: C:\Users\DownloaderGa\Desktop for logs and registry snapshots Assumes user owns the script folder. Rev: ib03 with SID auto-chk, no LT tfile, usage refs folder dir PS_SID: S-1-5-21-4176249515-117852638-1264263521-1001

Testfile:C:\Users\DownloaderGa\Desktop owner SID: S-1-5-21-4176249515-117852638-1264263521-1001 HKey: HKCU

reg export HKCU\Software\Microsoft\SystemCertificates\Root as HKCUcertRoot.reg The operation completed successfully.

reg export HKCU\Software\Microsoft\SystemCertificates\Root\Certificates as HKCUcerts.reg The operation completed successfully.

log HKUSid \Software\Microsoft\SystemCertificates\Root permissions and HKUSid \Software\Microsoft\SystemCertificates\Root\ProtectedRoots permissions as C:\Users\DownloaderGa\Desktop\ProtRoots.log

SetACL.exe -on HKCU\Software\Microsoft\SystemCertificates\Root\ProtectedRoots -ot reg -actn setowner -ownr n:Administrators Processing ACL of: <current_user\Software\Microsoft\SystemCertificates\Root\ProtectedRoots>

SetACL finished successfully. SetACL.exe -on HKCU\Software\Microsoft\SystemCertificates\Root\ProtectedRoots -ot reg -actn ace -ace n:Administrators;p:full Processing ACL of: <current_user\Software\Microsoft\SystemCertificates\Root\ProtectedRoots>

SetACL finished successfully. SetACL.exe -on HKCU\Software\Microsoft\SystemCertificates\Root -ot reg -actn setowner -ownr n:Administrators Processing ACL of: <current_user\Software\Microsoft\SystemCertificates\Root>

SetACL finished successfully. SetACL.exe -on HKCU\Software\Microsoft\SystemCertificates\Root -ot reg -actn ace -ace n:Administrators;p:full Processing ACL of: <current_user\Software\Microsoft\SystemCertificates\Root>

SetACL finished successfully. The Cryptographic Services service is stopping.. The Cryptographic Services service was stopped successfully.

reg delete HKCU\Software\Microsoft\SystemCertificates\Root\ProtectedRoots /f The operation completed successfully.

reg delete HKCU\Software\Microsoft\SystemCertificates\Root /f The operation completed successfully.

reg import HKCUcerts.reg (before CryptSvc start) reg : The operation completed successfully. The Cryptographic Services service is starting. The Cryptographic Services service was started successfully.

•  If error like:

.\CryptSvcAdminSetAclFix.ps1 : File C:\Users\DownloaderGa\Desktop\CryptSvcAdminSetAclFix.ps1 cannot be loaded because running scripts is disabled on this system. For more information, see about_Execution_Policies at https:/go.microsoft.com/fwlink/?LinkID=135170. At line:1 char:1 + .\CryptSvcAdminSetAclFix.ps1 + ~~~~~~~~~~~~~~~~~~~~~~~~~~~~ + CategoryInfo : SecurityError: (:) [], PSSecurityException + FullyQualifiedErrorId : UnauthorizedAccess

You need to run this first:

PS C:\Users\DownloaderGa\Desktop>set-executionpolicy remotesigned

Then again run:

PS C:\Users\DownloaderGa\Desktop> .\CryptSvcAdminSetAclFix.ps1

6. After that, it will display a page of progress info, which is logged as

PS C:\Users\DownloaderGa\Desktop> .\CryptSvcAdminSetAclFix.ps1.log

Done. Goodluck with this trick to fix error Chrome doesn't work when Edge doesn't run.

Source: https://productforums.google.com/forum/#!msg/chrome/s5S1uPI0kMc/PVBgVbx6DAAJ