Microsoft KB Archive/277868

= BUG: SSL Forwarding Can Cause Lsass.exe Cache to Use Excessive Memory =

Article ID: 277868

Article Last Modified on 6/11/2002

-

APPLIES TO


 * Microsoft Application Center 2000 Standard Edition

-



This article was previously published under Q277868



IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



SYMPTOMS
If you have a secure socket layer (SSL) site on an Application Center 2000 cluster that requires high rates of forwarding by way of the Application Center 2000 Request forwarding filter, the Lsass.exe file may expand to take all available memory. Note that INETINFO also shows high memory and handles counts in this case.



CAUSE
The Lsass.exe cache is attempting to grow beyond available memory.



RESOLUTION
WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

Limit the maximum size of the Lsass.exe cache by way of registry settings, as follows:  Start Registry Editor (Regedt32.exe). Locate the following key in the registry:

HKEY_LOCAL_MACHINE/SYSTEM/CurrentControlSet/Control/SecurityProviders/SCHANNEL

 On the Edit menu, click Add Value, and then add the following registry value:

Value Name: MaximumCacheSize

Data Type: REG_DWORD

Radix: Hexadecimal

Value: 000003e8

 On the Edit menu, click Add Value, and then add the following registry value:

Value Name: MinimumCacheSize

Data Type: REG_DWORD

Radix: Hexadecimal

Value: 000003e8

 Quit Registry Editor.</ol>

You must restart your system for this change to take place.

<div class="status_section">

STATUS
Microsoft has confirmed that this is a bug in the Microsoft products that are listed at the beginning of this article.

Keywords: kbbug kbpending KB277868

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.