Isticmaalayaasha qaar ayaa laga yaabaa inay la kulmaan dhibaatada uu habka LSAISO.exe (LSA Go'doonsan) uu la kulmo isticmaalka CPU sare^{(high CPU usage)} ee Windows 10 kumbuyuutarka. Nidaamku wuxuu la xidhiidhaa Ilaalada Aqoonsiga & Ilaalada Furaha^{(Credential Guard & Key Guard)} . Qormadan waxa aan ku eegi doonaa sababta ka dhalan karta iyo xalka lagu taliyey ee arrintan lagu xallin karo.

LAISO waxay habaysaa isticmaalka CPU sare

VSM waxay isticmaashaa habab go'doomin ah oo loo yaqaan Heerarka Kalsoonida Virtual^{(Virtual Trust Levels)} ( VTL ) si loo ilaaliyo hababka IUM (sidoo kale loo yaqaan kalsoonida). Nidaamyada IUM^(IUM) sida LAISO^(LSAISO) waxay ku shaqeeyaan VTL1 halka hababka kale ay ku socdaan VTL0 . Bogagga xusuusta ee hababka ku shaqeeya VTL1 waa laga ilaaliyaa kood kasta oo xaasidnimo ah oo ku socda VTL0 .

Habka Adeegga Nidaamka Hoosaadka ee Maamulka Amniga Gudaha (LSASS) ayaa mas'uul ka ah maaraynta nidaamka nidaamka deegaanka, xaqiijinta isticmaalaha, iyo xisaabinta iyadoo sidoo kale gacanta ku haysa xogta amniga xasaasiga ah sida xadhkaha sirta ah iyo furayaasha Kerberos .

Si loo isticmaalo faa'iidooyinka badbaadada VSM , LSAISO Trustlet ee ku shaqeeya VTL1 waxay la xidhiidhaa kanaalka RPC ee nidaamka ^(RPC)LSAISO ee ku socda VTL0 . Sirta LSAISO^(LSAISO) waa la siray ka hor inta aan loo dirin LSASS , boggaga LSAISO waa laga ilaaliyaa kood kasta oo xaasidnimo ah oo ku socda VTL0 .

Sababta suurtogalka ah ee habka LSAISO isticmaalka CPU sare^{(Possible cause of LSAISO process high CPU usage)}

Gudaha Windows 10, habka LSAISO^{(LSAISO process)} wuxuu u shaqeeyaa sidii Habka Isticmaalaha Go'doonsan^{(Isolated User Mode)} ( IUM ) ee jawi ammaan oo cusub oo loo yaqaan ' Virtual Secure Mode (VSM)'.

Codsiyada iyo darawalada isku dayaya inay ku shubaan DLL (Library Link Dynamic)^{(DLL (Dynamic Link Library))} ee nidaamka IUM , duri dunta, ama gudbiya habka isticmaale ee APC waxay khalkhal galin kartaa nidaamka oo dhan. Deganaansho la'aantani waxay kicin kartaa isticmaalka sare ee LSAISO CPU ^{(LSAISO CPU)}Windows 10 .

Sida loo xaliyo nidaamka LSAISO arrinta isticmaalka sare ee CPU^{(How to fix LSAISO process high CPU usage issue)}

Si arrintan loo xalliyo, Microsoft waxay ku talinaysaa isticmaalka mid ka mid ah hababka soo socda.

1. Isticmaal habka tirtiridda.
2. Hubi APC-yada safka ku jira

Haddaba, aynu tafaasiil ka bixino labada xal ee lagu taliyey.

1] Isticmaal habka tirtiridda^{(1] Use the process of elimination)}

Waa wax caadi ah codsiyada qaarkood (sida barnaamijyada ka hortagga) inay ku duraan DLL^(DLLs) -yada ama ay saf u galaan APC^(APCs) -yada nidaamka LAISO^(LSAISO) . Tani waxay sababtaa habka LSAISO inuu la kulmo isticmaalka CPU sare .

Xaaladdan, habka " habka tirtiridda^{(process of elimination)} " habka cilad-raadinta wuxuu u baahan yahay inaad joojiso codsiyada iyo darawallada ilaa kor u kaca CPU la yareeyo. Kadib markaad go'aamiso software-ka dhibaatada keenaya, la xidhiidh iibiyaha si aad u hesho cusboonaysiinta software.

2] Hubi APC-yada safka ku jira^{(2] Check for queued APCs)}

Xaaladdan, waxaad u baahan doontaa inaad marka hore soo dejiso aaladda Debugging Windows (WinDbg) ee bilaashka ah. Qalabka waxa kale^{(tool is also included)} oo uu ku jiraa Qalabka Darawalka Dareewalka ee Windows^{(Windows Driver Kit)} (WDK).

Markaad hesho qalabka WinDbg , waxaad sii wadi kartaa tillaabooyinka hoos ku xusan si aad u go'aamiso darawalka safka ugu jira APC LSAISO .

Fiiro gaar ah:^(Note:) Xasuusta oo dhammaystiran laguma talinayo sababtoo ah waxay u baahan tahay fur-furan haddii VSM ay karti u yeelato nidaamka.

Si aad awood ugu yeelatid qashinka kernel-ka, samee waxyaabaha soo socda:

• Riix furaha Windows +^(Run) R _ _^{(control system)} _ _^(System) _ _^{(Control Panel)} _ _^{(Advanced system settings)}
• On the Advanced  tab ee  sanduuqa wada hadalka Properties System^{(System Properties)}  , dooro  Settings  ee  bilowga iyo soo kabashada^{(Startup and Recovery)}  .
• Sanduuqa wada hadalka Startup and Recovery  , dooro  qashinka xusuusta Kernel^{(Kernel memory dump)}  ee ku  qor liiska hoos-u- hoosaadka macluumaadka debugging .^{(Write debugging information)}
• Samee qoraal ku saabsan meesha uu ku daadinayo faylka^{(Dump File)}  si aad u isticmaasho  talaabada 5^{(step 5)} , ka dibna dhagsii OK .

2. Guji badhanka Start , hel oo dhagsii galka Windows Kits ee ku yaal menu-ka ^{(Windows Kits)}Start , ka dib dooro WinDbg(x64/x86) si aad u bilowdo qalabka.

https://msdl.microsoft.com/download/symbols

4. Marka xigta, ee  menu  -ka Faylka , dhagsii ^(File)Qashinka Shilalka Furan^{(Open Crash Dump)} .

5. Ka baadho^(Browse) meesha uu yaalo faylka kernel-ka ee aad ku sheegtay talaabada 1-aad, ka dibna dooro Fur^(Open) . Hubi taariikhda ku taal faylka .dmp si aad u hubiso in la abuuray intii lagu jiray fadhiga cilad-saarka.

6.  Daaqadda  Command , ku qor ^(Command)!apc , ku dhufo Enter.

Waxaad heli doontaa wax soo saar la mid ah sida hoos ku cad.

7. Ka raadi natiijooyinka LsaIso.exe . Haddii darawalka lagu magacaabo " <ProblemDriver>.sys " uu ku hoos taxan yahay LsaIso.exe , sida ku cad wax soo saarka sare - la xiriir iibiyaha, ka dibna u gudbi dukumeentiga Microsoft^{(Microsoft document)} si loo yareeyo lagu taliyey ee Habka Isticmaalaha Go'doonsan^{(Isolated User Mode)} ( IUM ). ) hababka.

Haddii aanay darawaladu ku hoos liis gareyn Lsaiso.exe^(Lsaiso.exe) , tani waxay la macno tahay in nidaamka LSAISO aanu lahayn APCs saf ku jira .

That’s it!

Fix LSAISO process high CPU usage in Windows 10

Some users might be faced with the problem in which the LSAISO.exe (LSA Isolated) process experiences high CPU usage on a Windows 10 computer. The process is associated with Credential Guard & Key Guard. In this post, we have a look at the possible cause and the recommended solution to this issue.

LSAISO process high CPU usage

VSM uses isolation modes that are known as Virtual Trust Levels (VTL) to protect IUM processes (also known as trustlets). IUM processes such as LSAISO run in VTL1 while other processes run in VTL0. The memory pages of processes that run in VTL1 are protected from any malicious code that is running in VTL0.

The Local Security Authority Subsystem Service (LSASS) process is responsible for managing the local system policy, user authentication, and auditing while it also handled sensitive security data such as password hashes and Kerberos keys.

To use the security benefits of VSM, the LSAISO trustlet that runs in VTL1 communicates through an RPC channel with the LSAISO process that is running in VTL0. The LSAISO secrets are encrypted before they are sent to LSASS, and the pages of LSAISO are protected from any malicious code that is running in VTL0.

Possible cause of LSAISO process high CPU usage

In Windows 10, the LSAISO process runs as an Isolated User Mode (IUM) process in a new security environment that is known as Virtual Secure Mode (VSM).

Applications and drivers that try to load a DLL (Dynamic Link Library) into an IUM process, inject a thread, or deliver a user-mode APC may destabilize the entire system. This destabilization can trigger the high LSAISO CPU usage in Windows 10.

How to fix LSAISO process high CPU usage issue

To resolve this issue, Microsoft recommends using one of the following methods.

1. Use the process of elimination.
2. Check for queued APCs.

Now, let’s delve into details for the two recommended solutions.

1] Use the process of elimination

It is common for some applications (such as antivirus programs) to inject DLLs or queue APCs to the LSAISO process. This causes the LSAISO process to experience high CPU usage.

In this scenario, the “process of elimination” troubleshooting method requires that you disable applications and drivers until the CPU spike is mitigated. After you determine which software is causing the problem, contact the vendor for a software update.

2] Check for queued APCs

In this scenario, you’ll need to first download the free Windows Debugging (WinDbg) tool. The tool is also included in the Windows Driver Kit (WDK).

Once you have the WinDbg tool downloaded, you can then proceed with the steps outlined below to determine which driver is queuing an APC to LSAISO.

Note: A complete memory dump is not recommended because it would require decryption if VSM is enabled on the system.

To enable the kernel dump, do the following:

• Press Windows key + R. In the Run dialog box, type control system, hit Enter to open the System applet in Control Panel, and then select Advanced system settings.
• On the Advanced tab of the System Properties dialog box, select Settings in the Startup and Recovery area.
• In the Startup and Recovery dialog box, select Kernel memory dump in the Write debugging information drop-down list.
• Make a note of the Dump File location to use in step 5, and then click OK.

2. Click the Start button, locate and click Windows Kits entry on the Start menu, then select WinDbg(x64/x86) to launch the tool.

https://msdl.microsoft.com/download/symbols

4. Next, on the File menu, click Open Crash Dump.

5. Browse to the location of the kernel dump file that you noted in step 1, and then select Open. Check the date on the .dmp file to make sure that it was newly created during this troubleshooting session.

6. In the Command window, type !apc, hit Enter.

You’ll receive a similar output as shown below.

7. Search the results for LsaIso.exe. If a driver that is named “<ProblemDriver>.sys” is listed under LsaIso.exe, as shown in the output above – contact the vendor, and then refer them to this Microsoft document for the recommended mitigation for the Isolated User Mode (IUM) processes.

If no drivers are listed under Lsaiso.exe, this means that the LSAISO process has no queued APCs.

That’s it!

Related posts

• Sida loo hagaajiyo GSvr.exe dhibaatada isticmaalka CPU ee sare ee Windows 10

• Sida loo beddelo mudnaanta nidaamka CPU gudaha Windows 10

• 7 siyood oo loo hagaajiyo habka halista ah ayaa ku dhintay Windows 10

• Hagaaji habka MoUSO Core Worker ee gudaha Windows 10

• Sida loo hagaajiyo isticmaalka CPU sare ee Windows 10

• Hagaaji qaladka aqoonsiga dhacdada 454 - Arimaha waxqabadka astaanta isticmaalaha gudaha Windows 10

• Hagaaji Gelitaanka Kontroolka Helitaanka waa qalad kharriban gudaha Windows 10

• Waa maxay nidaamka splwow64.exe gudaha Windows 10 oo ma joojin karaa?

• Waa maxay Habka la Fulin karo Adeegga Antimalware & Ammaan ma yahay?

• Ma dejin karo Ahmiyadda Hannaanka Mudnaanta Maareeyaha Hawsha ee Windows 10

• Sida loo hagaajiyo "iastordatasvc" Isticmaalka CPU sare ee Windows 10

• Hagaaji Habka Adeegga Martigelinta DISM ee Adeegsiga Sare ee CPU

• Waa maxay atiesrxx.exe gudaha Windows 10 Maamulaha Hawsha?

• Hagaaji Magaca Dhacdada Dhibaatada BEX64 gudaha Windows 10

• Hagaaji ASUS Smart Gesture Touchpad oo aan shaqaynayn Windows 10

• Fix Partner kuma xidhmin cilada router ee TeamViewer on Windows 10

• Fix Sticky Notes icon ee ku yaal barta shaqada laguma darin Windows 10

• Hagaaji isticmaalka MPSigStub sare ee CPU gudaha Windows 11/10

• Hagaaji wmpnetwk.exe Xusuusta Sare iyo Isticmaalka CPU ee Windows

• Sida loo isticmaalo SysInternals Process Explorer Tool for Windows 10