Digitally signed components causing slow startup of applications when there is no network connectivity.

Action
You attempt to start a digitally signed .NET Windows application or Windows service.

Result
The application starts very slowly. Digitally signed Windows services may time out during startup, with the Service Control Manager returning error "Error 1053: The service did not respond to the start or control request in a timely fashion."

Cause
This occurs because the application needs to download the Certificate Revocation List (CRL) for authentication purposes, and a lack of network connectivity causes the download to fail by timing out. A firewall can potentially block the download and when Windows first starts up, the network connection is not initialized yet.

Resolution

1. One way is to cache the certificates locally, but it will expire within 15 days.
2. Another method is to minimize the default network timeout setting. To change the default timeout please follow the "More Information" section in the following Microsoft Knowledgebase article:
   
   841632 You receive the "403.13 client certificate revoked" error message after you install the MS04-11 security update http://support.microsoft.com/default.aspx?scid=kb;EN-US;841632
   


3. For a Windows service, you can increase the default timeout setting to allow the service to start by following these steps:
   
   
   
   1. In Registry Editor, locate, and then right-click the following registry subkey:
      
      HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control
      
   
   
   2. Point to New, and then click DWORD Value. In the right pane of Registry Editor, notice that New Value #1 (the name of a new registry entry) is selected for editing.
      
   
   
   3. Type ServicesPipeTimeout to replace New Value #1, and then press ENTER.
      
   
   
   4. Right-click the ServicesPipeTimeout registry entry that you created in step c, and then click Modify. The Edit DWORD Value dialog box appears.
      
   
   
   5. In the Value data text box, enter the desired timeout value in milliseconds and click OK. For example, if the new service timeout should be 60 seconds (60000 milliseconds), then enter 60000.
      
   
   
   6. Restart the computer. You must restart the computer for Service Control Manager to apply this change.
      
   
   

APPLIES TO
Microsoft .NET Framework 2.0

Best Regards,
Duane Aritonang
Chief Technology Officer
http://www.ArtDuane.com