2

My website runs on Windows Server 2016. It looks as follows:

  • IIS with 3 applications running with SSL:
    • MVC website (.Net Framework 4.7).
    • Two .Net Core 3.1 Api's.
  • MS SQL Express 2019.

If the traffic increases, the CPU for lsass.exe (yellow) increases dramatically:

enter image description here

In the end it takes so much CPU that my own applications get slow. I searched on the internet, most problem solving is linked to MS Active Directory. However, this is not installed on the server.

My question: Does anyone know how to identify which process is causing this behaviour? Is it a virus, MS SQL, SSL??

kloarubeek
  • 121
  • 2
  • lsass is related to authentication, is your .Net applications performing authentication, or group membership verifications for example ? – Swisstone Nov 22 '20 at 18:26
  • one of the api's is an authentication api that produces JWT access tokens. – kloarubeek Nov 22 '20 at 19:37
  • The most accurate way to learn why is to capture hang dumps of that process and analyze. If analyzing native dumps is not what you are familiar with, open a support case via http://support.microsoft.com BTW, it is recommended to host web server and database on separate machines. – Lex Li Nov 23 '20 at 16:53
  • @kloarubeek any solution for the CPU spike with LSASS.exe? – saravana Apr 15 '22 at 02:05
  • @saravana no, didn't find anything :-( – kloarubeek Apr 15 '22 at 08:50

0 Answers0