Step-by-step guide to install and configure a Windows KMS (Key Management Service) server

✅ 1. System Requirements

• A Windows Server (2012 R2 or newer recommended)
• Administrator access
• A KMS Host Key (GVLK) from Microsoft (usually part of a Volume Licensing agreement)

---

🛠️ 2. Install the KMS Host Key

a) Install Volume Activation Tools (if not already installed)

1. Open Server Manager
2. Go to Manage → Add Roles and Features
3. Click Next through to Features
4. Check Volume Activation Services
5. Complete the wizard and install

b) Run Volume Activation Tools

1. After installation, go to Server Manager → Tools → Volume Activation Tools
2. Choose:
   • Key Management Service (KMS)
   • The local computer
3. Enter your KMS Host Key (from VLSC)
4. Activate it online (or by phone if needed)

---

🔧 3. Configure the KMS Host

Once the key is validated:

• The server will create a SRV DNS record (_vlmcs._tcp) automatically (if DNS is configured correctly)
• KMS clients will find it via DNS

To verify:

powers

nslookup -type=SRV _vlmcs._tcp

You should see your KMS server listed.

---

🔥 4. Allow KMS Port Through Firewall

KMS uses TCP port 1688. Run:

powershell

netsh advfirewall firewall add rule name="KMS TCP 1688" protocol=TCP dir=in localport=1688 action=allow

---

💻 5. Activate Clients Using KMS

On client machines:

1. Use a GVLK (Generic Volume License Key) from Microsoft
   • List of GVLKs
2. Set KMS server and activate:

cmd

slmgr /ipk <GVLK>
slmgr /skms <KMS_server_name_or_IP>
slmgr /ato

---

🔄 6. Verify KMS Server Status

On the KMS host:

cmd

lmgr /dlv

You’ll see:

• KMS version
• Activation count
• Threshold (25 for clients, 5 for servers)
• Whether clients are connecting

---

📈 7. KMS Activation Thresholds

• Windows Clients need a minimum of 25 activations
• Windows Servers need 5

Until the threshold is reached, clients will not activate.