Helix failure `EPT_S_NOT_REGISTERED`

[amcasey]

We've been seeing a lot of Helix runs fail with a number of messages related to EPT_S_NOT_REGISTERED:

System.ComponentModel.Win32Exception : The Local Security Authority cannot be contacted

System.Security.Cryptography.CryptographicException : There are no more endpoints available from the endpoint mapper.

The failures only occur on Windows and inconsistently affect subsets of the IIS, HTTPS, Data Protection, and Certificate tests.

AFAICT, EPT_S_NOT_REGISTERED indicates that lsass.exe is not available.

Known Issue Error Message

Fill the error message using step by step known issues guidance.

{
  "ErrorMessage": "",
  "ErrorPattern": "(Local Security Authority cannot be contacted)|(no more endpoints available)",
  "BuildRetry": false,
  "ExcludeConsoleLog": false
}

Known issue validation

Build: :mag_right: https://dev.azure.com/dnceng-public/public/_build/results?buildId=778691 Error message validated: [(Local Security Authority cannot be contacted)|(no more endpoints available)] Result validation: :white_check_mark: Known issue matched with the provided build. Validation performed at: 8/19/2024 8:44:57 PM UTC

Report

Build	Definition	Test	Pull Request
2571475	dotnet-aspnetcore	IIS.ShadowCopy.Tests--net10.0.WorkItemExecution
854997	dotnet/aspnetcore	IIS.ShadowCopy.Tests--net10.0.WorkItemExecution
2567252	dotnet-aspnetcore	Microsoft.AspNetCore.Server.Kestrel.Sockets.FunctionalTests.Http2.ShutdownTests.GracefulTurnsAbortiveIfRequestsDoNotFinish	#44156
2567145	dotnet-aspnetcore	Microsoft.AspNetCore.Authentication.Certificate.Test.ClientCertificateAuthenticationTests.VerifyValidSelfSignedWithNoEkuAuthenticates	#44156
849273	dotnet/aspnetcore	IIS.LongTests--net9.0.WorkItemExecution
849119	dotnet/aspnetcore	Interop.FunctionalTests.H2SpecTests.RunIndividualTestCase	dotnet/aspnetcore#58548
2564357	dotnet-aspnetcore	IIS.Tests--net10.0.WorkItemExecution
847599	dotnet/aspnetcore	IIS.NewShim.FunctionalTests--net8.0.WorkItemExecution
847480	dotnet/aspnetcore	Microsoft.AspNetCore.Server.Kestrel.Core.Tests.SniOptionsSelectorTests.FallsBackToHttpsConnectionAdapterCertificate	dotnet/aspnetcore#58466
847326	dotnet/aspnetcore	IIS.NewShim.FunctionalTests--net10.0.WorkItemExecution
845573	dotnet/aspnetcore	Microsoft.AspNetCore.Server.HttpSys.FunctionalTests--net8.0.WorkItemExecution	dotnet/aspnetcore#58477
845506	dotnet/aspnetcore	IIS.LongTests--net9.0.WorkItemExecution
845602	dotnet/aspnetcore	Microsoft.AspNetCore.Authentication.Negotiate.NegotiateHandlerFunctionalTests.RequestAfterAuth_ReauthenticatesWhenNotPersisted
845219	dotnet/aspnetcore	IIS.LongTests--net10.0.WorkItemExecution	dotnet/aspnetcore#58472
845257	dotnet/aspnetcore	Microsoft.AspNetCore.DataProtection.DataProtectionProviderTests.System_UsesProvidedDirectoryAndCertificate	dotnet/aspnetcore#58473
844962	dotnet/aspnetcore	IIS.FunctionalTests--net9.0.WorkItemExecution	dotnet/aspnetcore#58462
845081	dotnet/aspnetcore	Microsoft.AspNetCore.Server.Kestrel.Sockets.FunctionalTests.Http2.HandshakeTests.TlsAlpnHandshakeSelectsHttp2From1and2	dotnet/aspnetcore#58464
844955	dotnet/aspnetcore	IIS.FunctionalTests--net9.0.WorkItemExecution
843829	dotnet/aspnetcore	Microsoft.AspNetCore.Server.Kestrel.Sockets.FunctionalTests.Http2.ShutdownTests.GracefulTurnsAbortiveIfRequestsDoNotFinish	dotnet/aspnetcore#58425
842267	dotnet/aspnetcore	Microsoft.AspNetCore.Server.Kestrel.InMemory.FunctionalTests.HttpsConnectionMiddlewareTests.CanReadAndWriteWithHttpsConnectionMiddleware	dotnet/aspnetcore#58428
841975	dotnet/aspnetcore	Templates.Mvc.Test.BlazorTemplateTest.BlazorWebTemplate_IndividualAuth
841997	dotnet/aspnetcore	Microsoft.AspNetCore.HttpOverrides.CertificateForwardingTests.VerifyHeaderIsUsedIfNoCertificateAlreadySet	dotnet/aspnetcore#58420
840804	dotnet/aspnetcore	Microsoft.AspNetCore.Server.Kestrel.InMemory.FunctionalTests.HttpsTests.ConfigureHttpsDefaultsNeverLoadsDefaultCert	dotnet/aspnetcore#58363
840545	dotnet/aspnetcore	Microsoft.AspNetCore.Server.Kestrel.Transport.NamedPipes.Tests.WebHostTests.ListenNamedPipeEndpoint_Tls_ClientSuccess	dotnet/aspnetcore#58374
840437	dotnet/aspnetcore	Microsoft.AspNetCore.HttpOverrides.CertificateForwardingTests.VerifyHeaderIsUsedIfNoCertificateAlreadySet
840331	dotnet/aspnetcore	Microsoft.AspNetCore.Authentication.Negotiate.NegotiateHandlerFunctionalTests.RequestAfterAuth_ReauthenticatesWhenNotPersisted	dotnet/aspnetcore#58372
839996	dotnet/aspnetcore	IIS.NewHandler.FunctionalTests--net10.0.WorkItemExecution
839867	dotnet/aspnetcore	IISExpress.FunctionalTests--net9.0.WorkItemExecution	dotnet/aspnetcore#58355
839773	dotnet/aspnetcore	Microsoft.AspNetCore.DataProtection.Test.XmlEncryption.EncryptedXmlDecryptorTests.ThrowsIfProvidedCertificateDoesHavePrivateKey	dotnet/aspnetcore#58363
839198	dotnet/aspnetcore	Templates.Test.GrpcTemplateTest.GrpcTemplateNativeAot	dotnet/aspnetcore#58355
835859	dotnet/aspnetcore	Microsoft.AspNetCore.Server.Kestrel.InMemory.FunctionalTests.HttpsConnectionMiddlewareTests.CanReadAndWriteWithHttpsConnectionMiddleware	dotnet/aspnetcore#57923

Summary

24-Hour Hit Count	7-Day Hit Count	1-Month Count
0	0	31

[amcasey]

Possibly relevant: https://github.com/GSA/piv-guides/issues/102#issuecomment-357303941 (via @adityamandaleeka)

[lewing]

Sdk was is seeing validation errors in windows hosts https://github.com/dotnet/sdk/issues/42870

[lewing]

did this start with the new helix rollout last week?

[javiercn]

Merged https://github.com/dotnet/aspnetcore/pull/57431 that hopefully avoids some of the template test problems.

[radical]

This is the same problem as https://github.com/dotnet/dnceng/issues/3844 AFAICT.