Tuesday, August 24, 2021 [Tweets] [Favorites]

High CPU Use From trustd

Jeff Johnson (tweet, 2):

I’ve heard from several other people who started noticing the same issue yesterday too, one of whom helpfully referred me to this reddit thread with even more reports. On investigation, I found that the nsurlsessiond process was connecting to the server valid.apple.com, and immediately afterward trustd CPU jumped from 0% to 100%. It seems that the issue can be temporarily solved by preventing nsurlsessiond from connecting to valid.apple.com. You may have to reboot or force quit trustd to get its CPU usage back to normal. It’s important to note that this is only a temporary workaround to the CPU usage problem; trustd is an important macOS system process that checks certificate validity and revocation status, so you probably don’t want to block valid.apple.com forever.

I’ve been seeing long periods of high CPU use from trustd since Catalina.

My postmortem theory is that at some point Apple had some bad data in their Certificate Revocation List online, everyone downloaded the bad data, and then trustd got stuck. Anyway, it looks like blocking valid.apple.com is no longer necessary after removing and regenerating the valid.sqlite3 database.

To delete the database you need to reboot into macOS Recovery, and then find the SQLite file on the main boot drive, not at the recovery’s /private/var/protected/trustd/.

The problem is also seen on iOS, though it’s not clear how to fix it unless your device is jailbroken.

Previously:

3 Comments

/private/var/protected/trustd/ doesn’t exist in Catalina.
The valid.sqlite3 database lives in /Library/Keychains/crls/ in this version of MacOS X (and I haven’t checked in later versions).

/private/var/protected/trustd/ does exist in Monterey (Beta 6).

I am trying the steps listed in this article: https://www.reddit.com/r/jailbreak/comments/ncfprs/tutorial_a_fix_for_the_trustd_process_constantly/

because the computer is just killing my internet connection — nothing else in the house can even download a text file when the MB running Monterey is connected.

- restart w/ cmd-R
- in terminal cd /Volumes/[HD name]/private/var/protected/trustd
- rm *.sqlite3
- reboot

I'll come back and report if it works.

Nope, didn't work. It turns out it was just my computer updating the Photos library. You can delete my two comments if you want ;-).

Love your blog, always have.

Stay up-to-date by subscribing to the Comments RSS Feed for this post.

Leave a Comment