Supplemental Step-By-Step Guide for KMS for Windows Server 2003

8/18/2019 Supplemental Step-By-Step Guide for KMS for Windows Server 2003

1/21

Key Management Service for Windows Server2003

Supplemental Step-By-Step GuideMicrosoft® Corporation

Published: February, 2007 (last updated 2/08/07

Purpose!his supple"ental #uide pro$ides plannin#, deploy"ent, and operational#uidance for acti$atin# %ey Mana#e"ent &er$ice for 'indo s &er$er 200)*!he 'indo s +ista +olu"e cti$ation 2*0 &tep-.y-&tep uide is essentialreadin# and a prere uisite for understandin# this docu"ent*

Who Should Use the Key Management Service forWindows Server 2003?!his #uide is tar#eted at 1! professionals ho are responsible for deployin#and "ana#in# %M& for 'indo s +ista deploy"ent on 'indo s &er$er200) co"puters*

http://www.microsoft.com/technet/windowsvista/plan/volact1.mspxhttp://www.microsoft.com/technet/windowsvista/plan/volact1.mspx


2/21

ii 'indo s +ista +olu"ecti$ation 2*0

1nfor"ation in this docu"ent, includin# 345 and other 1nternet 'eb site references, is sub6ect tochan#e ithout notice*

3nless other ise noted, the co"panies, or#ani ations, products, do"ain na"es, e-"ailaddresses, lo#os, people, places, and e$ents depicted in e a"ples herein are fictitious* 9oassociation ith any real co"pany, or#ani ation, product, do"ain na"e, e-"ail address, lo#o,person, place, or e$ent is intended or should be inferred*

Co"plyin# ith all applicable copyri#ht la s is the responsibility of the user* 'ithout li"itin# theri#hts under copyri#ht, no part of this docu"ent "ay be reproduced, stored in or introduced intoa retrie$al syste", or trans"itted in any for" or by any "eans (electronic, "echanical,photocopyin#, recordin#, or other ise , or for any purpose, ithout the e press rittenper"ission of Microsoft Corporation*

Microsoft "ay ha$e patents, patent applications, trade"ar s, copyri#hts, or other intellectualproperty ri#hts co$erin# sub6ect "atter in this docu"ent* ; cept as e pressly pro$ided in any

ritten license a#ree"ent fro" Microsoft, the furnishin# of this docu"ent does not #i$e you anylicense to these patents, trade"ar s, copyri#hts, or other intellectual property*

< 200= Microsoft Corporation* ll ri#hts reser$ed*

Microsoft, cti$e >irectory, cti$e?, 'indo s, 'indo s 2000, 'indo s &er$er, 'indo s +ista,and 'indo s ?P are either re#istered trade"ar s or trade"ar s of Microsoft Corporation in the3nited &tates and/or other countries*

!he na"es of actual co"panies and products "entioned herein "ay be the trade"ar s of theirrespecti$e o ners*


3/21

Contents%ey Mana#e"ent &er$ice for 'indo s &er$er 200)************************************** *************

&upple"ental &tep-.y-&tep uide***************************************************************************

1ntroduction**************************************************************************************************

Proble"***************************************************************************************************

+olu"e cti$ation 2*0 &olution**************************************************************************

.enefits of +olu"e cti$ation 2*0**********************************************************************

%ey Mana#e"ent &er$ice for 'indo s 200) &er$er @$er$ie ************************ ************

>ifferences bet een 'indo s 200) &er$er and 'indo s +ista %M&+ersions**************************************************************************************************

Pac a#e 1nstallation************************************************************************************

9o raphical 3ser 1nterface ( 31 ****************************************************************

%M& %eys and cti$ation*****************************************************************************9o @ut-of-.o race Period*************************************************************************

%M& for 'indo s 200) 4elease 9otes****************************************************************

$ailable +ersions***************************************************************************************

%M& and @& 5an#ua#e +ersions Must Match**************************************************

%M& for 'indo s &er$er 200) 'ill 9ot 4un in a +irtual Machine*********** ***********

%no n 1ssues*****************************************************************************************

@btainin# +olu"e 5icense %eys*************************************************************************

cti$ation 5i"its****************************************************************************************

1"portant 9ote******************************************************************************************

>eploy"ent uidance*******************************************************************************************

eneral Considerations************************************************************************************

%M& cti$ation !echnical @$er$ie ***************************************************************

Prere uisites for %M& cti$ation*******************************************************************

%M& Aost &i in#**************************************************************************************

d"inistrati$e Credentials***************************************************************************

&teps for 1nstallin# the %M& pac a#e on 'indo s &er$er 200)***************** ************

1nstall a %M& Pac a#e*********************************************************************************

4e"o$e a %M& Pac a#e******************************************************************************

&teps for Confi#urin# a %M& cti$ation**************************************************************Confi#urin# %M& Aosts********************************************************************************

@perational uidance*****************************************************************************************

.uilt-in &criptin# &upport*******************************************************************************

Microsoft %ey Mana#e"ent &er$ice M@M Pac ***************************************************

%no n 1ssues ith the M@M Pac ***************************************************************

%M& Aealth Monitorin#******************************************************************************


4/21

%M& cti$ity 4eportin#******************************************************************************

.ac up 4e uire"ents************************************************************************************

roup Policy &upport*************************************************************************************

!roubleshootin#************************************************************************************************

%M& cti$ation !roubleshootin# &teps**************************************************************

Mappin# ;rror Codes to !e t Messa#es*************************************************************

4e$ie in# cti$ation ;$ents****************************************************************************

'M1 &oft are 5icensin# Classes and Properties*************************************** **********

ppendi B: 1nstallin# the M@M 200 #ent on =D-bit &yste"s********************** **********

dditional 4esources******************************************************************************************


5/21

ntroduction

!ro"lem&oft are asset and license "ana#e"ent pose continual challen#es for bothenterprise custo"ers as ell as soft are de$elopers* !he issue of #enuinesoft are (runnin# le#iti"ately licensed operatin# syste"s and applications asopposed to ille#iti"ate soft are not only i"pacts the soft are $endors but theconsu"ers, corporate users and partners* Ean ee #roup (sponsored by Microsoftin its research concluded that consu"ers and businesses that deploy counterfeitsoft are put the"sel$es, their end users, business partners and suppliers atserious ris for:

• 9et or do nti"e and lost data increases hen the counterfeit soft are"alfunctions*

• !echnical ser$ice and support and interoperability issues in$ol$in#counterfeit soft are typically ta e lon#er to resol$e because either the#ray "ar et source is lon# #one or the le#iti"ate soft are $endor illspend "ore ti"e tryin# to troubleshoot*

• .usinesses that no in#ly or un ittin#ly use counterfeit soft are are atincreased ris of liti#ation fro" business partners, suppliers andcusto"ers in the e$ent their net or operations are ad$ersely affected

hen so"ethin# #oes a ry ith the pirated soft are*• 9on-#enuine soft are also raises the ris of inco"patibility ith

le#iti"ate 'indo s and @ffice patches, fi es and updates*

4esearch by 1>C (sponsored by Microsoft sho s that ac uirin# and usin#counterfeit soft are can pose real ris s* !he research e a"ined ebsites thatoffer counterfeit soft are as ell as hac s, crac s and ey#enG tools a$ailable on

ebsites and P2P net or s that enable the ille#al use of soft are* The researchfound there is a significant amount of malicious or unwanted code present in keygenerators and crack tools, and on websites that offer counterfeit software.&pecifically, "alicious or un anted soft are as found in:

• 2#$ of the 'eb sites (2 of H8 sites offerin# counterfeit product eys,pirated soft are, ey #enerators or crac tools

• %%$ of ey #enerators and crac tools (B) out of BB= fro" ebsites• #&$ of ey #enerators and crac tools ( of HD do nloaded fro" P2P

net or s

Finally the pre$ious $ersions of Microsoft 'indo s didnGt pro$ide tools andsolutions to enterprise custo"ers that are necessary to protect and "ana#e thesoft are and the associated license eys* ;nterprise custo"ers had no ability totrac the ey usa#e or control its use ithin as ell as outside of their "ana#eden$iron"ent*


6/21

2 'indo s +ista +olu"e cti$ation 2*0 !echnical uidance

For these reasons, Microsoft continually in$ests in technolo#ies and pro#ra"s tohelp protect consu"ers and businesses fro" the ris s and hidden costs ofcounterfeit and unlicensed soft are hile enablin# the enterprise custo"ers intheir soft are asset and license "ana#e"ent efforts*

'olume (ctivation 2)0 Solution+olu"e cti$ation 2*0 is a ne re uire"ent in the 'indo s +ista operatin#syste" and 'indo s &er$er® Code 9a"e I5on#horn,I hich re uires acti$ation of each 'indo s +ista license ac uired under a +olu"e 5icense a#ree"ent* 'hendesi#nin# and buildin# the ne $olu"e acti$ation technolo#ies, Microsoft focusedon the follo in# #oals:

Close si#nificant piracy loopholes (+olu"e 5icense eys represent the "a6ority ofthe eys that are in$ol$ed in 'indo s piracy*

;nable protection and "ana#e"ent of $olu"e license eys ith "ini"al i"pact todeploy"ent and "ana#e"ent of the infrastructure

1"pro$e the custo"er e perience+olu"e cti$ation 2*0 is desi#ned to help increase protection and to help better"ana#e the +olu"e 5icense eys in "ana#ed and non-"ana#ed en$iron"ents as

ell as pro$ide fle ible deploy"ent options for custo"ers* !he process istransparent for end users, and the +olu"e cti$ation 2*0 solution or s in a$ariety of custo"er en$iron"ents*

Benefits of 'olume (ctivation 2)0+olu"e cti$ation 2*0 supports centrally "ana#ed +olu"e 5icense eys* !he %eyMana#e"ent &er$ice (%M& ey used for %M& acti$ation is only installed on the

%M& host and ne$er on indi$idual co"puters* !he Multiple cti$ation %ey (M % ,althou#h resident on the indi$idual co"puter, is encrypted and ept in a trustedstore so that users are not e posed to the ey and are not able to obtain the eyonce it has been installed on the co"puter*

+olu"e cti$ation 2*0 supports a si"plified setup and is #enerally in$isible to thecusto"ers* .y default, +olu"e editions do not re uire a product ey to be entereddurin# setup* !he co"puter "ust be acti$ated durin# an auto"atic )0-day #raceperiod*

&yste" d"inistrators can count %M& acti$ations usin# standard syste""ana#e"ent soft are includin# the Microsoft @perations Mana#er (M@M , as ellas the +olu"e cti$ation Mana#e"ent !ool (+ M! * 'indo s Mana#e"ent

1nfrastructure ('M1 , e tensi$e e$ent lo##in#, and built-in pplicationPro#ra""in# 1nterfaces ( P1s "ay pro$ide a ealth of detail about installedlicenses and about the license state and current #race or e piration period of M %and %M&-acti$ated co"puters*

+olu"e cti$ation 2*0 also "ay pro$ide enhanced security throu#h fre uentbac #round $alidations for enuine "odules* !his is currently li"ited to criticalsoft are, but "ay be e panded o$er ti"e*


7/21

%ey Mana#e"ent &er$ice for 'indo s &er$er 200) )

Key Management Service for Windows 2003Server *verview

%M& for 'indo s &er$er 200) beha$es nearly identically to the 'indo s +istai"ple"entation* !he desi#n #oal has been to ensure that interfaces (&5 P1, 'M1 ,tools (sl"#r*$bs, M@M pac , &M& &P) , error lo#s, error codes and "ostoperational docu"entation apply identically to both $ersions*

.oth %M& $ersions share the sa"e 'indo s +ista %M& ey* s ith 'indo s +ista,it is necessary to acti$ate the %M& host before it can support %M& clientacti$ations* .oth $ersions "ust also be reacti$ated if there are si#nificant chan#esto underlyin# hard are or dri$ers*

!he re uired "ini"u" nu"ber of 'indo s +ista clients needed to supportacti$ation re"ains at 2 * (!his is deter"ined by the 'indo s +ista client, ratherthan %M&*

%M& clients can use either the 'indo s +ista or 'indo s 200) %M& $ersionsinterchan#eably* >9& publishin# and autodisco$ery beha$e identically*

+ifferences "etween Windows 2003 Server andWindows 'ista KMS 'ersions

lthou#h the 'indo s 200) &er$er and 'indo s +ista i"ple"entations are $erysi"ilar, so"e differences e ist and are discussed here*

!ac,age nstallation!he %M& for 'indo s &er$er 200) ser$ice (spps$c is installed as a pac a#e o$erthe e istin# operatin# syste"* 1nstallation is based on the fa"iliar &oft are 3pdate1nstaller and is fast and easy* %M& can be re"o$ed usin# dd or 4e"o$e Pro#ra"sin the Control Panel*

o Grap.ical /ser nterface G/ 1!here is no 31 support for the 'indo s &er$er 200) ser$ice* !herefore, allinteraction ith %M& "ust be done usin# the built-in script, sl"#r*$bs* 9otably,&531*e e, hich in 'indo s +ista is the reco""ended tool to "ap error codes todescripti$e te t, is not supported* &ince nearly all %M& interactions re uire the useof the sl"#r*$bs script, the lac of a 31 has little i"pact*

KMS Keys and (ctivation!he 'indo s +ista %M& ey is used to acti$ate the %M& host functionality only*!his has no affect on the acti$ation or other fuctions of the underlyin# ser$eroperatin# syste"* 'indo s &er$er 200) "ay need to be separately acti$ated*(+olu"e and @;M $ersions of 'indo &er$er 200) do not re uire acti$ation* 1t isalso i"portant to note that the %M& ser$ice for 'indo s &er$er 200) and thecorrespondin# %M& ey only support the acti$ation of $olu"e editions of the'indo s +ista operatin# syste"*


8/21

D 'indo s +ista +olu"e cti$ation 2*0 !echnical uidance

lthou#h both online (1nternet and offline (telephone acti$ation of the %M&ser$ice are supported, offline acti$ation of %M& for 'indo s &er$er 200) can onlybe done usin# the sl"#r*$bs script*

o *ut-of-Bo Grace !eriod!he 'indo s 200) $ersion of %M& ill be in the 3nlicensed state i""ediately afterit is installed* !here is no #race period, because the %M& host "ust be (andre"ain acti$ated in order for %M& clients to use it to acti$ate* @nce the %M& eyhas been installed and the %M& host has been acti$ated, the license state illchan#e to 5icensed*

KMS for Windows 2003 elease otes

(vaila"le 'ersions

!he %M& for 'indo s &er$er 200) pac a#e is a$ailable in the follo in# $ersions:• ?8= and ?=D $ersions (no 1 =D J• 'indo s &er$er 200) &PB or #reaterJ• 'indo s &er$er 200) &tandard, ;nterprise and >atacenterJ• 1nitial lan#ua#e $ersions include 3& ;n#lish, Kapanese and er"anJ• &upport for all standard 'indo s &er$er 200) lan#ua#es is e pected to be

a$ailable ithin D L = ee s fro" initial release

KMS and *S 4anguage 'ersions Must Matc.!he %M& lan#ua#e $ersion "ust "atch the lan#ua#e $ersion of the underlyin#

operatin# syste"* %M& ill not install properly if the lan#ua#es do not "atch*dditionally, an incorrect error "ay be displayed if installation is atte"pted on anon-"atchin# syste"*

KMS for Windows Server 2003 Will ot un in a'irtual Mac.ine

.y desi#n, %M& for 'indo s 200) is not supported ithin a +M* !he %M& ser$iceill install but ill not acti$ate, returnin# error 0 C00DF0=8*

Known ssues@n installin# or usin# %M& acti$ation, you "ay encounter the follo in# no n

issues:• %M& "ust be uninstalled and reinstalled in order to repair an installation*• %M& "ust be uninstalled prior to up#radin# the 'indo s 200) syste" to

any $ersion of 'indo s &er$er codena"e 5on#hornN*• !he %M& installer reports that installation as successful, e$en if the

installation as cancelled*


9/21

%ey Mana#e"ent &er$ice for 'indo s &er$er 200)

• 3ninstallin# the %M& host ser$ice (spps$c hile it is runnin# indicates thatthe ser$ice should be stopped* Clic in# bort instead of Continue lea$esthe syste" in a confused state, necessitatin# a reboot of the syste"*

• &ysprep on 'indo s &er$er 200) does not reset the %M& ser$ice state*4e"o$e the pac a#e before runnin# sysprep and then reinstall andreconfi#ure it*

*"taining 'olume 4icense Keys@r#ani ations that participate in any +olu"e 5icense pro#ra"s can obtain %M&%eys fro" the follo in# portals* dditional acti$ations can also be re uested fro"the Microsoft cti$ation Call Center, belo *• e@pen ( https://eopen*"icrosoft*co"/;9/default*asp• Microsoft +olu"e 5icensin# &er$ices (M+5&

( https://licensin#*"icrosoft*co"/e5icense/5B0))/default*asp• Microsoft cti$ation Call Center - 3& Custo"ers call B-888-) 2-7BD0*

For international custo"ers, contact your local support center*

For phone nu"bers of acti$ation centers orld ide, #o to the follo in# 345:

http:// *"icrosoft*co"/licensin#/resources/$ol/nu"bers*"sp

Custo"ers ill need to pro$ide their +olu"e 5icense a#ree"ent infor"ationand proof of purchase hen they call*

(ctivation 4imits.y default, a %M& ey can be used on up to = different %M& hosts, ith up to B0acti$ations on the sa"e hard are* !he %M& ey can be used on any co"binationof 'indo s +ista %M& or %M& for 'indo s &er$er 200) %M& hosts* Custo"ers canre uest an o$erride or special e ception to e tend the acti$ation li"it by callin#their Microsoft cti$ation Call Center*

mportant oteEou are responsible for both the use of eys assi#ned to you and the acti$ation ofproducts usin# your %M& hosts*

• Eou should not disclose eys to third parties*• Eou "ay not pro$ide unsecured access to your %M& hosts o$er an

uncontrolled net or such as the 1nternet*

https://eopen.microsoft.com/EN/default.asphttps://licensing.microsoft.com/eLicense/L1033/default.asphttp://www.microsoft.com/licensing/resources/vol/numbers.mspxhttps://eopen.microsoft.com/EN/default.asphttps://licensing.microsoft.com/eLicense/L1033/default.asphttp://www.microsoft.com/licensing/resources/vol/numbers.mspx


10/21

= 'indo s +ista +olu"e cti$ation 2*0 !echnical uidance

+eployment Guidance!he >eploy"ent uidance section pro$ides step-by-step instructions for installin#,confi#urin# and acti$atin# the %ey Mana#e"ent &er$ice for 'indo s &e$er 200)*

5or general considerations6 read t.e following sections7• %M& cti$ation !echnical @$er$ie• Prere uisites for %M& cti$ation• %M& Aost &i in#• d"inistrati$e Credentials

5or installing and configuring t.e KMS pac,age6 read t.e followingsections7• &teps for 1nstallin# the %M& pac a#e on 'indo s &er$er 200)• &teps for Confi#urin# %M& cti$ation

General Considerations!his section pro$ides #eneral considerations on i"ple"entin# and deployin# the%ey Mana#e"ent &er$ice for 'indo s &er$er 200)*

KMS (ctivation 8ec.nical *verview%M& for 'indo s &er$er 200) does not re uire dedicated co"puters to run it, andcan be easily co-hosted ith other ser$ices* sin#le %M& host can supporthundreds of thousands of %M& clients* Most or#ani ations should be able tooperate ith 6ust t o %M& hosts for their entire infrastructure, althou#hor#ani ational considerations "ay dictate deploy"ent of additional %M& hosts* &eethe %ey Mana#e"ent &er$ice section in Windows 'ista 'olume (ctivation 2)0Step-By-Step Guide for further details* %. article H2H7B2 contains an o$er$ie of +olu"e cti$ation 2*0, and has lin s to "any pertinent do nloads and additionaltechnical docu"entation*

!rere9uisites for KMS (ctivation• Eou "ust do nload the Key Management Service for Windows Server

2003 pac a#e fro" the Microsoft >o nload Center*• Eou "ay need to confi#ure the %ey Mana#e"ent &er$ice e$ent lo#, hich is

under the pplications lo#, to ensure it is lar#e enou#h to acco""odate the$olu"e e pected in your or#ani ation* ;ach B22H0 e$ent, hich occurs e$eryti"e a %M& client connects to the %M& host, re uires appro i"ately B,000bytes* Eou can set the lo# options and si e in the 4og !roperties dialo# bo *

http://www.microsoft.com/technet/windowsvista/plan/volact1.mspx#KeyManagementServiceKeyhttp://support.microsoft.com/default.aspx?scid=kb;EN-US;929712http://go.microsoft.com/fwlink/?LinkID=82964&clcid=0x409http://go.microsoft.com/fwlink/?LinkID=82964&clcid=0x409http://www.microsoft.com/technet/windowsvista/plan/volact1.mspx#KeyManagementServiceKeyhttp://support.microsoft.com/default.aspx?scid=kb;EN-US;929712http://go.microsoft.com/fwlink/?LinkID=82964&clcid=0x409http://go.microsoft.com/fwlink/?LinkID=82964&clcid=0x409


11/21

%ey Mana#e"ent &er$ice for 'indo s &er$er 200) 7

KMS :ost Si;ing%M& host processin# capacity should not be a li"itin# factor for $irtually any si eor#ani ation* sin#le %M& host is capable of supportin# hundreds of thousands of%M& clients, and %M& re uests are only a fe hundred bytes each* 1n addition,

hen atte"ptin# to acti$ate, the client co"puter "a es a %M& re uest e$ery t o

hours and only once e$ery se$en days hen acti$ated (these defaults areconfi#urable * 9or"ally, a client co"puter acti$ates ith the initial re uest*

Follo in# are so"e considerations for plannin# a %M& host:• %M& is co"pute-cycle intensi$e hile acti$ely processin# re uests* CP3 usa#e

can "o"entarily reach B00 percent on a sin#le-processor co"puter under ahea$y re uest load*

• %M& "e"ory usa#e can $ary fro" appro i"ately B0 M. to around 2 M.,dependin# on the nu"ber of inco"in# re uests*

• 9et or o$erhead is "ini"al* Fe er than 2 0 bytes are sent in each directionfor a co"plete client-%M& e chan#e, plus !CP session setup and teardo n* !heonly additional net or traffic is for auto-disco$ery, hich usually occurs only

once per client co"puter, as lon# as the sa"e %M& continues to be a$ailable forsubse uent rene als*

• 5ar#e or#ani ations "ay ant to confi#ure "ultiple %M& hosts for load-balancin# and redundancy, or to satisfy or#ani ational needs*

Co-:osting KMS!o "ini"i e cost, "any or#ani ations prefer to co-host %M& alon# ith otherfunctions* %M& is desi#ned to support co-hostin#* %M& can easily coe ist ithco""on ser$er roles, includin# do"ain controllers* 1t has a s"all resourcefootprint durin# nor"al operation, althou#h it can beco"e co"pute-bound asnoted in the pre$ious section* !his is "ost li ely to occur after a lar#e deploy"entof %M& clients or if "ost users start their co"puters in a short period* 1f CP3consu"ption is an issue, %M& supports a lo priority option*

(dministrative Credentials!o co"plete any of the follo in# procedures, you "ust be a "e"ber of the

d"inistrators #roup* ll script functions "ust be run fro" a co""and pro"pt asa local ad"inistrator*


12/21

8 'indo s +ista +olu"e cti$ation 2*0 !echnical uidance

Steps for nstalling t.e KMS pac,age on WindowsServer 2003

!o install and confi#ure %M& hosts, perfor" the steps pro$ided in the follo in#sections:

• 1nstall a %M& Pac a#e• 4e"o$e a %M& Pac a#e

nstall a KMS !ac,age 1nstall a %M& Pac a#e usin# the follo in# procedure*

8o install a KMS pac,age

B* 1nstall 'indo s &er$er 200) &PB or later on a suitable co"puter and confi#urere uired roles*

2* >o nload Eou "ust do nload the Key Management Service for WindowsServer 2003 pac a#e fro" the Microsoft >o nload Center*

)* 5aunch the Key Management Service for Windows 2003 e ecutable andfollo the instructions* &teps include:

a* cceptin# the 5icense #ree"ent

b* 3pdatin# the syste"

c* Co"pletin# the installation*

emove a KMS !ac,age

4e"o$e a %M& Pac a#e usin# the follo in# procedure*

8o emove a KMS !ac,age

B* &top the %M& host ser$ice by stoppin# the &oft are Protection Platfor" ser$iceusin# the &er$ices MMC snap-in or run the follo in# co""and fro" aco""and pro"pt usin# ad"ininstrati$e per"issions:net stop sppsvc /y

2* @pen dd or 4e"o$e Pro#ra"s in Control Panel*

)* &elect Key Management Service for Windows 2003 and clic the 4e"o$ebutton*

http://go.microsoft.com/fwlink/?LinkID=82964&clcid=0x409http://go.microsoft.com/fwlink/?LinkID=82964&clcid=0x409http://go.microsoft.com/fwlink/?LinkID=82964&clcid=0x409http://go.microsoft.com/fwlink/?LinkID=82964&clcid=0x409


13/21

%ey Mana#e"ent &er$ice for 'indo s &er$er 200) H

Steps for Configuring a KMS (ctivation!o install and confi#ure %M& hosts, perfor" the steps pro$ided in the follo in#sections:

• Confi#urin# %M& Aosts• !o confi#ure %M& publishin# to >9&, see the %M& Publishin# to >9& section

in Windows 'ista 'olume (ctivation 2)0 Step-By-Step Guide• !o install, confi#ure, deploy, and acti$ate %M& clients, refer to the %M&

Clients section in Windows 'ista 'olume (ctivation 2)0 Step-By-StepGuide *

Configuring KMS :ostsMost %M& confi#uration settin#s are optional and should only be used if re uiredfor the local en$iron"ent* ll settin#s re uire that you launch a co""and pro"pt

ith ad"inistrator pri$ile#e and use the built-in sl"#r*$bs script*• ;nable a %M& Aost and cti$ate @nline• ;nable a %M& Aost and cti$ate @ffline• Confi#ure %M& optional para"eters • 4estart the %M& ser$ice


14/21

B0 'indo s +ista +olu"e cti$ation 2*0 !echnical uidance

for offline acti$ation:cscript C:\windows\system3 \slmgr.vbs /dti

D* @btain a telephone nu"ber for your re#ion by openin# and searchin# the te tfile C7=Windows=System32=S4/ =p.one)inf

* !elephone the Microsoft cti$ation Center and pro$ide the 1nstallation 1>J

carefully record the correspondin# Confir"ation 1> that is read bac to you*=* 4un the follo in# script to acti$ate the %M& L do not add spaces or punctuation

to the Confir"ation 1>:cscript C:\windows\system3 \slmgr.vbs /atp !Confirmation '(%

7* 1f no error as reported, the %M& host is no ready to be used by %M& clientsfor acti$ation* dditional confi#uration is optional and ill usually not bere uired* Eou can confir" your %M& license state and settin#s by runnin#:cscript C:\windows\system3 \slmgr.vbs /dli

Configure KMS optional parameters

Confi#ure optional para"eters for a %M& host usin# the follo in# procedure*

8o Configure KMS optional parameters

B* @ptionally confi#ure the !CP co""unications port that the %M& host illuse by runnin#: cscript C:\windows\system3 \slmgr.vbs /sprt !port%.%M& clients that use direct re#istration ha$e to be confi#ured accordin#ly*Clients that use auto-disco$ery ill auto"atically recei$e and confi#ure theport hen they select a %M& host*

2* @ptionally disable auto"atic >9& publishin# by usin# the follo in# script:cscript C:\windows\system3 \slmgr.vbs /cdns

)* 4e-enable auto"atic >9& publishin# usin# the follo in# script:

cscript C:\windows\system3 \slmgr.vbs /sdnsD* @ptionally set the %M& host to process usin# lo ered scheduler priority:

cscript C:\windows\system3 \slmgr.vbs /cpri

* 4e$ert to nor"al priority:cscript C:\windows\system3 \slmgr.vbs /spri

=* @ptionally set the acti$ation inter$al that clients ill use if not acti$ated(default is B20 "inutes * 4un the script:cscript C:\windows\system3 \slmgr.vbs /sai !)ctivation'nterval%


15/21

%ey Mana#e"ent &er$ice for 'indo s &er$er 200) BB

8o Configure KMS optional parameters

7* @ptionally set the rene al inter$al that the clients ill use for periodicallye tendin# their acti$ation e piration (in "inutes L default is se$en days *4un the follo in# script:cscript C:\windows\system3 \slmgr.vbs /sri !*enewal'nterval%

ote Eou "ust restart the %M& ser$ice for "ost chan#es to ta e effect*

estart t.e KMS Service Confi#uration chan#es #enerally re uire you to restart the %M& &er$ice usin# the

follo in# procedure before they ta e effect*

8o estart t.e KMS Service

B* 5aunch the &er$ices snap-in fro" d"inistrati$e !ools in the &tart "enu* &electthe &oft are Protection Platfor" ser$ice and use the &top and &tart co""ands

to restart the ser$ice, or2* 4un the follo in# co""and:

net stop sppsvc /y ++ net start sppsvc


16/21


17/21

%ey Mana#e"ent &er$ice for 'indo s &er$er 200) B)

Microsoft Key Management Service M*M !ac,Eou can use the Microsoft 'indo s %ey Mana#e"ent &er$ice M@M Pac to "ana#ethe %M& en$iron"ent, to "eet established a$ailability re uire"ents, and tosupport e tensi$e reportin# of %M& acti$ations*

!he %M& M@M Pac is shipped separately* !o do nload the %M& M@M Pac , #o tohttp:// *"icrosoft*co"/technet/prodtechnol/"o"/"o"200 /catalo#*asp

>ocu"entation pro$ided ith the M@M Pac discusses installation, confi#urationand use of %M& rules on your M@M &er$er as ell as the %M& reports on your M@M>ata 'arehouse*

Known ssues wit. t.e M*M !ac,@n =D-bit $ersions of 'indo s &er$er 200), the M@M 200 #ent ( hich is )2bits cannot see the $ersion nu"ber stored in the re#istry* !his $alue is used todeter"ine "e"bership in the Co"puter roup defined by the %M& M@M Pac *'ithout bein# 6oined in the Co"puter roup, the %M& ill not pro$ide data to the

M@M ser$erQs data arehouse* !he re#istry $alue is created by sl"#r*$bs hen the%M& is acti$ated and is stored by default in the =D-bit $ie of the re#istry* !hereare t o ays to or around this issueJ for details, see ppendi B: 1nstallin# theM@M 200 #ent on =D-bit &yste"s *

KMS :ealt. Monitoring!he %M& M@M Pac "onitors the health of the %M& hosts by chec in# for errorconditions and a$ailability* 1t alerts ad"inistrators hen a potential proble" isobser$ed* lerts are #enerated for the follo in# conditions:• %M& initiali ation failures• >9& &4+ publishin# failures• %M& host count is belo a specified threshold• 9o %M& acti$ity has occurred for desi#nated periods

KMS (ctivity eporting sa"ple set of &R5 reports is pro$ided for use as a basis for e tensi$e reportin#

on acti$ation* !hese reports are as follo s:• (ctivation Count Summary7 &ho s the nu"ber of %M& acti$ations for each

'indo s edition and for se$eral historical ti"e ran#es*• 'irtual Mac.ine Summary7 >isplays the nu"ber of uni ue $irtual "achines

and physical "achines that ha$e acti$ated usin# %M& acti$ations for each'indo s edition in the past BD days*

• KMS (ctivity Summary7 &ho s daily ne %M& acti$ations for each 'indo sedition* !he !otal 4e uests chart sho s daily %M& re uest acti$ity, hichincludes both acti$ations and rene als, for each 'indo s edition* dditionally,a list of all contributin# %M& hosts is displayed, and the reports can be filteredto display only the traffic fro" specified %M& hosts*

• 4icensing Status Summary7 &ho s the nu"ber of days left to e piration forco"puters that ha$e connected to a %M& for each of the license states*

http://www.microsoft.com/technet/prodtechnol/mom/mom2005/catalog.aspxhttp://www.microsoft.com/technet/prodtechnol/mom/mom2005/catalog.aspx


18/21

BD 'indo s +ista +olu"e cti$ation 2*0 !echnical uidance

• Mac.ine < piration C.art7 &ho s the nu"ber of co"puters that are in @@.,@@!/; p, or non- enuine #race, hose users could be loc ed out (3nlicensedin the ne t )0 days*

• Mac.ine < piration +etail7 5ists the co"puters that are in @@., @@!/; p ornon- enuine #race hose users could fall into 4educed Functionality Mode(3nlicensed in the ne t 7 days*

Bac,up e9uirements.ac up is not re uired for %M& hosts* Ao e$er, if you need to trac the %M&acti$ations, you can periodically e port the %ey Mana#e"ent &er$ice ;$ent lo#data under pplications for acti$ation history*

Group !olicy Supportll confi#uration and property data is supported by 'M1 and/or the 'indo s

re#istry, and can therefore, be "ana#ed ith roup Policy* !here are no roup-Policy specific additions or chan#es for +olu"e 5icensin#*

8rou"les.ooting!his section pro$ides #uidance on troubleshootin# issues that are specific to %M&on 'indo s &er$er 200)* 4efer to the !roubleshootin# section in Windows 'ista'olume (ctivation 2)0 Step-By-Step Guide to dia#nose 'indo s +istaacti$ation issues*

KMS (ctivation 8rou"les.ooting Steps!he follo in# table presents issues related to %M& acti$ation*

ssue esolution

Ao can 1 tell if "y %M&host is acti$atedO

4un the sl"#r*$bs /dli script*

5icense &tatus:N sho s hether %M& is acti$ated( 5icensedN * %M& is only able to support clientacti$ation hile it is acti$ated*

sl"#r*$bs /ato returns anerror code*

1f no error te t is included, you can deter"ine thecorrespondin# error "essa#e* &ee Mappin# ;rrorCodes to !e t Messa#es *

a!le "# KMS rou!leshooting Steps

http://www.microsoft.com/technet/windowsvista/plan/volact1.mspx#Troubleshootinghttp://www.microsoft.com/technet/windowsvista/plan/volact1.mspx#Troubleshooting


19/21

%ey Mana#e"ent &er$ice for 'indo s &er$er 200) B

Mapping


20/21

B= 'indo s +ista +olu"e cti$ation 2*0 !echnical uidance

(ppendi %7 nstalling t.e M*M 200# (gent on>?-"it Systems

@n =D-bit $ersions of 'indo s 200), the M@M 200 #ent ( hich is )2 bits

cannot see the $ersion nu"ber stored in the re#istry* !his $alue is used todeter"ine "e"bership in the Co"puter roup defined by the %M& M@M Pac *'ithout bein# 6oined in the Co"puter roup, the %M& ill not pro$ide data to theM@M ser$erQs data arehouse* !he re#istry $alue is created by sl"#r*$bs hen the%M& is acti$ated, and is stored by default in the =D-bit $ie of the re#istry*

!here are t o ays to or around this installation issue:• !his proble" can be "iti#ated by creatin# a custo" Co"puter roup on the

M@M ser$er that e plicitly adds all %M& hosts for collection* !his can be eyedoff of #achine ame or any other ueryable property*

• 4un 4; ;>1!*;?; as an ad"inistrator* Copy the $alue of

:K?32node=Microsoft=Windows 8=Current'ersion=S4=KeyManagementService'ersion

4e#ardless of the or around chosen, it is critical that all %M& hosts runnin# the=D-bit $ersion of the operatin# syste" ha$e the sa"e or around applied*

mportant note7 !his section contains infor"ation about ho to "odify the re#istry* Ma e sure to bac

up the re#istry before you "odify it* Ma e sure that you no ho to restore the re#istry if a proble"

occurs* For "ore infor"ation about ho to bac up, restore, and "odify the re#istry, clic the follo in#

article nu"ber to $ie the article in the Microsoft %no led#e .ase: 2 =H8= >escription of the Microsoft

'indo s re#istry*

http://support.microsoft.com/kb/256986/http://support.microsoft.com/kb/256986/http://support.microsoft.com/kb/256986/


21/21

%ey Mana#e"ent &er$ice for 'indo s &er$er 200) B7

(dditional esources• !he Windows 'ista 'olume (ctivation 2)0 Step-By-Step Guide is

essential readin# and a prere uisite for understandin# the "#$ on 0indows223 $tep67y6$tep 8uide * 1t is a$ailable at

http:// *"icrosoft*co"/technet/ indo s$ista/plan/$olactB*"sp• >o nload !echnical >ocu"entation and @ther &upportin# Materials

http://#o*"icrosoft*co"/f lin /O5in 1> 7 =7D• For ans ers to fre uently as ed uestions about 'indo s +ista +olu"e

cti$ation 2*0, refer to the +olu"e cti$ation 2*0 F RI inhttp:// *"icrosoft*co"/technet/ indo s$ista/plan/fa *"sp

• "ana#e"ent pac is a$ailable for the %ey Mana#e"ent &er$ice for Microsoft@perations Mana#er 200 * 1t is a$ailable athttp:// *"icrosoft*co"/technet/prodtechnol/"o"/"o"200 /catalo#*asp

• For a list of 'M1 "ethods, %M& re#istry eys, %M& e$ents, %M& error codes,

and %M& 4PC "essa#es, refer to the +olu"e cti$ation 2*0 !echnicalttributes* lsN inhttp:// *"icrosoft*co"/technet/ indo s$ista/plan/$olact2*"sp

• For infor"ation about the Microsoft &olution ccelerator for .usiness >es top>eploy"ent (.>> :http:// *"icrosoft*co"/technet/des topdeploy"ent/bdd/2007/default*"sp

• For a list of +olu"e 5icense products a$ailable, #o to:

http:// *"icrosoft*co"/licensin#/default*"sp
http://www.microsoft.com/technet/windowsvista/plan/volact1.mspxhttp://go.microsoft.com/fwlink/?LinkID=75674http://www.microsoft.com/technet/windowsvista/plan/faq.mspxhttp://www.microsoft.com/technet/prodtechnol/mom/mom2005/catalog.aspxhttp://www.microsoft.com/technet/windowsvista/plan/volact2.mspxhttp://www.microsoft.com/technet/desktopdeployment/bdd/2007/default.mspxhttp://www.microsoft.com/licensing/default.mspxhttp://www.microsoft.com/technet/windowsvista/plan/volact1.mspxhttp://go.microsoft.com/fwlink/?LinkID=75674http://www.microsoft.com/technet/windowsvista/plan/faq.mspxhttp://www.microsoft.com/technet/prodtechnol/mom/mom2005/catalog.aspxhttp://www.microsoft.com/technet/windowsvista/plan/volact2.mspxhttp://www.microsoft.com/technet/desktopdeployment/bdd/2007/default.mspxhttp://www.microsoft.com/licensing/default.mspx

Supplemental Step-By-Step Guide for KMS for Windows Server 2003

Documents

Transcript of Supplemental Step-By-Step Guide for KMS for Windows Server 2003