Activating Microsoft Products Using the Key Management Service (KMS)

Northwestern provides access to Microsoft Windows and Microsoft Office software through an volume licensing agreement with the vendor. To use Windows or Office on a departmental computer, users must activate the software through a Volume Activation (VA) process. This process uses a Key Management Service (KMS) host that each computer will need to access via the Northwestern network periodically to validate. Once successfully activated through a connection to the KMS, periodic reauthorization should occur in the background and users should not have to manually process activation requests to the KMS host.

General

To activate Microsoft Windows or Microsoft Office with the University’s KMS Service, the following conditions must be met:

  • The Machine must have an IP address from a Northwestern University subnet, to include VPN connections (Firewall rules allow access to the KMS host to all Northwestern University IP ranges including VPN and Wireless.)
  • The Machine’s system date, time and time zone must be accurate (to within 3 minutes of GMT)
  • The Machine's BIOS must be up to date (Check computer manufacturer website, or consult manufacturer technical support)
    • If you get an error that states "No OEM license found", it may require a BIOS update to support volume upgrade activations.
  • Business Units and Departments may need to add the 'northwestern.edu' and 'ads.northwestern.edu' DNS suffix to a client host's network adaptor found under TCP/IP properties to resolve the DNS lookup and allow for the KMS activation.
    • Almost all KMS issues on computers outside the ADS domain (for example, Feinberg and Kellogg machines) are caused by the DNS suffix being absent.

Before you begin

To avoid issues with KMS activation, make sure to take these steps before you start the activation process.

1. Verify the DNS suffix is set up correctly

Almost all of the issues with KMS activation are caused by a missing DNS suffix. If you receive an error, first verify the DNS suffix is set up correctly:
  1. Click the Start Menu and search for Network and Sharing Center.
  2. In the top right corner, click Change Adapter Settings.
  3. Right click the active network (wireless, wired, or VPN) and click Properties.
  4. In the Networking tab, double-click Internet Protocol Version 4 (TCP/IPv4).
  5. In the General tab, click Advanced at the bottom.
  6. In the DNS tab, find the DNS suffix for this connection: box. Type northwestern.edu into this box, then click OK.
  7. Click OK to exit both open settings menus.

2. Verify the machine can connect to KMS

  1. Open the Command Prompt via "Run As Administrator". Right-click on Command Prompt in the start menu to bring up the option.

  2. KMS_RunAs-Small.JPG
  3. Verify that the machine can connect to the SRV DNS record of the KMS host by running the following command: nslookup -type=srv _vlmcs._tcp.northwestern.edu 
  4. If the machine can resolve the connection, you should see something similar to the following:

  5. KMS_SRV_Lookup-Small.jpg
  6. If the machine cannot resolve the connection, ensure that the DNS suffixes are set up correctly (see above).
  7. If the DNS suffixes are set up correctly and the client still cannot resolve the KMS host address, you may need to install Telnet Client (not installed by default) on Windows 7 to verify the client can access port 1688 on the KMS host.
  8. Once you are sure the machine can connect to the KMS host, proceed with the instructions below for activation.

Activation

Please reference the Volume Activation Troubleshooting Guide and Volume Activation Error Codes list to troubleshoot other KMS errors.
  • Windows 7 (Operating System) Activation
    1. To check the KMS Activation status within the Windows 7 client, click the Start Menu.
    2. Right-click on Computer, then click Properties.
    3. The activation status will be listed at the bottom of page under Windows activation.

    4. Windows7_Activation_Small.png
    5. To clear out any existing/old KMS settings, run the following command: cscript c:\windows\system32\slmgr.vbs /ckms
    6. Attempt to activate the Windows 7 license via KMS by running the following command: cscript c:\windows\system32\slmgr.vbs /ato
    7. Reboot the computer and check to see if the activation was successful.
    8. (If required) To manually assign a KMS host address to a KMS client for Windows 7, run the following command:
      cscript c:\Windows\System32\slmgr.vbs /skms kms01.ads.northwestern.edu:1688

  • Windows 8 (Operating System) Activation
    1. To check a Windows 8 client's License and Activation Configuration, run the following command: cscript c:\windows\system32\slmgr.vbs -dli
    2. If the machine is activated, you will see something similar to the following:

    3. Windows8_Activation_Small.png
    4. To clear out any existing/old KMS settings, run the following command: cscript c:\windows\system32\slmgr.vbs /ckms
    5. Attempt to activate the Windows 10 license via KMS by running following command: cscript c:\windows\system32\slmgr.vbs /ato
    6. Reboot the computer and check to see if the activation was successful.
    7. (If required) To manually assign a KMS host address to a KMS client for Windows 8, run the following command:
      cscript c:\Windows\System32\slmgr.vbs /skms kms01.ads.northwestern.edu:1688

  • Office 2010 Activation
    1. To check the KMS Activation status of the Office 2010 client, open any Office program (Word, Excel, etc.) and click the File tab.
    2. Click the Help option. The activation status will be listed above the About section.

    3. Office2010_Activation_Small.png
    4. Attempt to activate the Office 2010 license by running the following command: cscript c:\"Program Files"\"Microsoft Office"\Office14\ospp.vbs /act
    5. To review the KMS client activation history log for Office 2010, run the following command:
      cscript c:\"Program Files"\"Microsoft Office"\Office14\ospp.vbs /dhistorykms
    6. (If required) To manually assign a KMS host address to a KMS client for Office 2010, run the following command:
      cscript c:\"Program Files"\"Microsoft Office"\Office14\ospp.vbs /sethst:kms01.ads.northwestern.edu

  • Office 2013 Activation
    1. To check the KMS Activation status of the Office 2013 client, open any Office program (Word, Excel, etc.) and click the File tab.
    2. Click the Account option. The activation status will be listed to the right in the Product Information section.

    3. Office2013_Activation_Small.png
    4. Attempt to activate the Office 2013 license by running the following command:
    5. cscript C:\"Program Files (x86)"\"Microsoft Office"\Office15\ospp.vbs /act or cscript C:\"Program Files"\"Microsoft Office"\Office15\ospp.vbs /act
    6. To review KMS client activation history log for Office 2013, run the following command:
      cscript c:\"Program Files (x86)"\"Microsoft Office"\Office15\ospp.vbs /dhistorykms or cscript c:\"Program Files"\"Microsoft Office"\Office15\ospp.vbs /dhistorykms
    7. (If required) To manually assign a KMS host address to a KMS client for Office 2013, run the following command:
      cscript C:\"Program Files (x86)"\"Microsoft Office"\Office15\ospp.vbs /sethst:kms01.ads.northwestern.edu or cscript C:\"Program Files"\"Microsoft Office"\Office15\ospp.vbs /sethst:kms01.ads.northwestern.edu

  • Office 2016 Activation
    1. To check the KMS Activation status of the Office 2016 client, open any Office program (Word, Excel, etc.) and click the File tab.
    2. Click the Account option. The activation status will be listed to the right in the Product Information section.

    3. Office2016_Activation_Small.jpg
    4. Attempt to activate the Office 2016 license by running the following command:
    5. cscript C:\"Program Files (x86)"\"Microsoft Office"\Office16\ospp.vbs /act or cscript C:\"Program Files"\"Microsoft Office"\Office16\ospp.vbs /act
    6. To review KMS client activation history log for Office 2016, run the following command:
      cscript c:\"Program Files (x86)"\"Microsoft Office"\Office16\ospp.vbs /dhistorykms or cscript c:\"Program Files"\"Microsoft Office"\Office16\ospp.vbs /dhistorykms
    7. (If required) To manually assign a KMS host address to a KMS client for Office 2016, run the following command:
      cscript C:\"Program Files (x86)"\"Microsoft Office"\Office16\ospp.vbs /sethst:kms01.ads.northwestern.edu or cscript C:\"Program Files"\"Microsoft Office"\Office16\ospp.vbs /sethst:kms01.ads.northwestern.edu

Setting up a SRV DNS Record for the NU KMS Host

Northwestern IT has established two SRV type records for KMS client activations within central DNS to point to 'kms01.ads.northwestern.edu' and 'kms02.ads.northwestern.edu'. Business Units and Departments may also request a separate SRV DNS record to be created under their local sub domain. Requests should be sent to hostmaster@northwestern.edu with the following details:

  • NAME: _vlmcs._tcp.
  • TYPE: SRV
  • PRIORITY: 0
  • WEIGHT: 0
  • PORT: 1688
  • HOSTNAME: kms01.ads.northwestern.edu

Technical Information

Microsoft TechNet: KMS Activation Timing and Discovery

In operation, the KMS client attempts to contact a KMS host on startup and again every Activation Interval minutes upon failure. By default, this happens every two hours. When KMS activation succeeds, the client receives and stores the KMS host's Renewal Interval, and Windows activates for 180 days. Activation renewal operates as a sliding window, similar to a DHCP lease. The client is activated for 180 days but still attempts reactivation every Renewal Interval minutes-by default, 7 days. If it succeeds, the 180-day period is reset. If it fails, the system will watch for network changes or other qualifying events to trigger another attempt. After 15 minutes, the system stops monitoring for qualifying events but still attempts every Activation Interval minutes.

If 180 days passes without successful reactivation, the client transitions into Out of Tolerance (OOT) Grace. If it does not activate within 30 days of transitioning to OOT, it falls into Notification mode.

Notification mode notifies the user that the client is using unlicensed software. Once the KMS client sees the KMS host, the notifications are no longer received. Volume licensed software in notification mode, does not lose any functionality.

For additional assistance please contact the IT Support Center at 847-491-4357 (1-HELP), via chat at http://www.it.northwestern.edu/chat or via email at consultant@northwestern.edu.




Keywords: MS windows office "ms office" operating system word excel powerpoint   Doc ID:70295
Owner:TSS Endpoint Management .Group:Northwestern
Created:2017-01-31 09:56 CDTUpdated:2019-02-04 11:57 CDT
Sites:Northwestern
Feedback:  2   6