Understanding Volume Activation Services – Part 1 (KMS and MAK) - Azure Cloud & AI Domain Blog (2024)

Windows Activation and KMS havebeen around for many years – and still – a lot of people don’t understand the basics of Windows activation, what are the differences between KMS and MAK, and how to choose the best Volume Activation method that meets the organization’s needs.

In this blog post, we’llshed some light on these subjects and explain how to deploy and useVolume Activation services correctly.
This will be the first part in the series.

Series:

So… What is KMS?

KMS, like MAK, is an activation method for Microsoft products, including Windows and Office.
KMS stands for Key Management Service. The KMS server, called ‘KMS host’, is installed on a server in your local network. The KMS clients connect to the KMS host for activation of both Windows and Office.

Prerequisites

A KMS host running on Windows Server 2019/2016/2012R2 can activate all Windows versions, including Windows Server 2019 and Windows 10 all the way down to Windows Server 2008R2 and Windows 7. Semi-Annual and Long-Term Service Channel (LTSC) are both supported by the KMS.

Pay attention that Windows Server 2016 and Windows Server 2012R2 will require to install the following KB’s in order activate the newest Windows 10 Enterprise LTSC and Windows Server 2019:

For Windows Server 2016:
1.KB4132216 – Servicing stack update, May 18 (Information, Download).
2.KB4467684– November Cumulative Update or above (Information, Download).

For Windows Server 2012R2:
1. KB3173424 –Servicing stack update (Information, Download).
2.KB4471320 –December 2018 Monthly Rollup (Information, Download).

In order to activate clients, the KMS uses a KMS host key. This key can be obtained from the Microsoft VLSC (Volume Licensing Service Center) website. By installing that key, you are configuring the server to act as a KMS host.
Because KMS host key of newer Windows version can be used to activate older Windows versions, you should only obtain and install the latest KMS host key available in VLSC.
Also, note that KMS host key for Windows server can be used to activate Windows clients – so you can (and should) use one KMS host key to rule them all.

Now that you understand those facts, you know you should look for ‘Windows Server 2019’ version in VLSC and obtain the KMS host key for that version. Once again, this key will let you activate any Windows server and Windows client version in your environment.

Deploying the KMS host

After getting the KMS host key from VLSC, you’ll need to install it. For that, we’ll use the Volume Activation Tools feature, available on Windows Server 2012R2 and above.
You can install the Volume Activation Tools feature using the Server Manager (Remote Server Administration Tools -> Role Administration Tools -> Volume Activation Tools) or by using the following PowerShell command: Install-WindowsFeature RSAT-VA-Tools.

Run the tool right from Server Manager -> Tools or by typing ‘vmw’in your PowerShell screen.
Volume Activation Tools lets you choose between Active Directory-Based Activation (will be covered in the second post) and Key Management Service (KMS). For now, we’ll choose to the KMS activation method.

After selecting the activation method, you’ll be asked to provide the KMS host key obtained from the VLSC.

Choose your preferred activation method (by phone or online using the internet) to activate the KMS host key for the selected product.

In the ‘Configuration’ step, pay attention to the following settings:

  1. Volume license activation interval (Hours) – determines how often the KMS client attempts activation before it is activated. The default is 2 hours.
  2. Volume license renewal interval (Days) –determines how often the KMS client attempts reactivation with KMS (after it has been activated). The default is 7 days.
    By default,Windows activates by the KMS host for 180days. After 7 days, when there are 173 days left for the volume activation to be expired, the client attempts reactivation against the KMS host and gets a new 180 days activation period.
  3. KMS TCP listening port – By default, the KMS host is listening on port 1688 (TCP). You can change the port if needed using this setting.
  4. KMS firewall exceptions – Creating the relevant firewall exceptions for the Private/Domain/Public profiles.
  5. DNS Records – By selecting ‘Publish’, the Volume Activation Tools wizard creates the _vlmcs SRV record (e.g_vlmcs._tcp.contoso.com). Windows uses this SRV record to automatically find the KMS server address.

Reviewing KMS client settings

By now, you should be running a KMS host configured with KMS a host key for Windows Server 2019.

Any Windows client that configured to use ‘KMS Client Channel‘ will be activated against the new KMS host automatically within 2 hours (as this is the ‘KMS Activation Interval‘ default value).
The ‘KMS Client Channel’ determined by the product key used in the client. By default,computers that are running volume-licensed editions are KMS clients with no additional configuration needed.
In case you’ll be required to convert a computer from a MAK or retail edition to a KMS client, you can override the currently installed product key and replace it with an applicableKMS client key that suitable for your Windows version. Pay attention that the selected key should exactly match the Windows version you’re using, otherwise it won’t work.
These KMS clients keys, also known as Generic Volume License Keys (GVLK), are public and can be found in the KMS Client Setup Keyspage.

From the client perspective, you can use the slmgr.vbsscript to manage and view the license configuration.
For astart, you can run ‘slmgr.vbs /dli’ to display the license information currently applied on the client.
You can see in the screenshot that a KMS client channel is being used.

If required, use ‘slmgr.vbs /ipkPRODUCTKEY’ (e.g slmgr.vbs /ipk WC2BQ-8NRM3-FDDYY-2BFGV-KHKQY) to replace the current product key with a new one (KMS client channel in this example).

In order to initiate an activation attempt, you can use the ‘slmgr.vbs /ato’, which willimmediately try to activate Windows.
The KMS host will respond to the activation request with the count of how many computers have already contacted the KMS host for activation. Computers that receive a count below the activation threshold are not activated.
The activation threshold is different for Windows clients and servers:

  • Clients will activate if the count is 25 or higher
  • Servers will activate if the count is 5 or higher.

You can find the full list of slmgr.vbs command-line options right here.

When to use KMS

Compared to MAK, KMS should be your preferableactivation method as long as you meet theactivation threshold and the (very) basic requirements for deploying KMS (which are DNS and TCP/IP connectivity between the clients and the KMS host).
Saying that we’ll see in part 2 why Active Directory-Based Activation is actually even better than KMS for most scenarios.

What is MAK?

MAK (Multiple Activation Key) is another activation method for Microsoft products, including Windows and Office.
Unlike KMS, MAK activation isused for a one-time activation against Microsoft’s hosted activation services.
This means that MAK does not require any server or services within your network – the activation request approved by Microsoft servers either online or by phone (for isolated environments that can’t reach the internet).

Just like KMS, the MAK keys can be found in yourVLSC portal. Each MAK has a predefined number of allowed activations, and each activation occurrence will incrementally increase the number of used activation for that MAK.
In the screenshot above, you can see that 3 activations (out of 300 allowed activation/seats) were completed using a MAK for Windows Server 2016 Standard.

How to use MAK

Using MAC for activation is very simple.
First, you’ll have to go to VLSC and obtain thesuitable MAK for your product (like Windows Server 2016 Standard).
then, open Command Prompt (cmd) in elevated mode and run the following commands:

  1. Install your MAK key using ‘slmgr.vbs /ipk MAKProductKey’ (e.g slmgr.vbs /ipkABCDE-123456-ABCDE-123456-ABCDE).
  2. Activate Windows using ‘slmgr.vbs /ato’. The following message should appear:
  3. To view the activation details you can use the ‘slmgr /dli’ command.

When to use it

MAK activation method should be used only for computers that never connect to the corporate network and for environments where the number of physical computers does not meet the KMS activation threshold and Active Directory-based activation could not be used for some reason.

Summary

In the first part of the series we learned about KMS and MAK, and we understoodthe purpose of each activation method.
As a thumb rule, you should always try to stick with KMS activation as long as it possible.
When KMS is not an option (usually due to lack of connectivity to thecorporate network), consider using a MAK.

Remember that one KMS host key can be used to activate all of your Windows versions includes servers and clients. Grab the latest version from your VLSC and you’re good to go.
If you encounter problems when trying to activate, check that your KMS server is available and running, and useslmgr.vbs tool to get more details about your client’s activation status.

  • Omer Eldan Understanding Volume Activation Services – Part 1 (KMS and MAK) - Azure Cloud & AI Domain Blog (10)
Understanding Volume Activation Services – Part 1 (KMS and MAK) - Azure Cloud & AI Domain Blog (2024)

FAQs

What is the difference between MAK and KMS activation? ›

Key Management Service (KMS): Office is activated by contacting a KMS host computer on your network. Multiple Activation Key (MAK): Office is activated online by Microsoft-hosted activation servers or by telephone. Active Directory-based: Office on a domain-joined computer is activated through Active Directory.

What is KMS volume activation? ›

KMS uses a client-server model to active clients and is used for volume activation. KMS clients connect to a KMS server, called the KMS host, for activation. The KMS host must reside on your local network. KMS hosts don't need to be dedicated servers, and KMS can be cohosted with other services.

What is the MAK key for Office activation? ›

Multiple Activation Key (MAK) activation is used for one-time activation through Microsoft-hosted activation services, either via the internet or by telephone. MAK activation requires that a MAK is installed on a client computer and instructs that computer to activate itself against those services.

What is the difference between volume activation management tool and KMS? ›

Key Management Service (KMS) is an activation mechanism. The Volume Activation Management Tool (VAMT) is a tool. that can be used to perform volume activation using the KMS. KMS is an activation mechanism.

Is KMS activation illegal? ›

Activation servers (KMS) through an organization or educational institution is legal, and should be used for those intents and purposes.

What is an example of a MAK key? ›

Like standard VLKs, MAK keys allow a predetermined number of activations, depending on the number of licenses an organisation requests. For example, if your donation includes 10 copies of Windows 7, you can use the Windows 7 MAK key to install that product on 10 separate computers.

What is KMS used for? ›

AWS Key Management Service (KMS) gives you centralized control over the cryptographic keys used to protect your data.

Can I delete KMS after activation? ›

Authorized users can schedule the deletion of KMS keys with imported key material. This action permanently deletes the KMS key, its key material, and all metadata associated with the KMS key.

Is KMS activation permanent? ›

Systems can remain activated for up to 180 days without needing to re-contact the KMS. Systems that haven't renewed their activation lease within 180 days have a 30 day grace period before they will persistently notify that they need to be activated.

What is the use of MAK key? ›

MAK (Multiple Activation Key) is a single activation key for a specific product. When a company buys e.g. Office 2019 Standard, they commonly receive 1 MAK – no matter the number of licenses they have bought. This MAK is used to activate all devices the licenses were bought for.

How to get a mak key? ›

NOTE: MAK keys are available only for companies, not individuals. So you have to either work for a company and have the power to decide on the purchase or own a company. P.S. Adding some more info requested by the OP. To check the MAK license key status, you can use the Volume Activation Management Tool.

How do I change Office activation from MAK to KMS? ›

Changing the activation from MAK to KMS

If you have already entered a MAK key and want to change to KMS activation, you have to replace the MAK key by a KMS key. This is the default key for every Microsoft software product that has been purchased via a Microsoft volume licensing contract (e.g. MS Campus or MS select).

What is the difference between KMS and mak? ›

Key Management Service (KMS) allows organizations to activate systems within their own network. Multiple Activation Key (MAK) activates systems on a one-time basis, using Microsoft hosted activation services.

What is KMS tool used for? ›

Microsoft uses MAK (Multiple Activation Keys) and KMS (Key Management System) for activation of Windows in volume basis. MAK keys are used to phoning back to Microsoft's server similarly clients using KMS activates Windows by phoning to KMS server in local network rather than Microsoft's.

How do I activate KMS volume? ›

KMS volume activation can be verified from the KMS host server or from the client computer. KMS volume activation requires a minimum threshold of 25 computers before activation requests are processed.

Can you use a MAK key with a KMS server? ›

If you have already entered a MAK key and want to change to KMS activation, you have to replace the MAK key by a KMS key. This is the default key for every Microsoft software product that has been purchased via a Microsoft volume licensing contract (e.g. MS Campus or MS select).

What is KMS server activation? ›

KMS (Key Management Service) is one of the methods to activate Microsoft Windows and Microsoft Office. Activation ensures that the software is obtained from and licensed by Microsoft. KMS is used by volume license customers, usually medium to large businesses, schools, and non-profits.

What are KMS keys used for? ›

Overview. AWS Key Management Service (KMS) gives you centralized control over the cryptographic keys used to protect your data. The service is integrated with other AWS services making it easier to encrypt data you store in these services and control access to the keys that decrypt it.

Top Articles
Fund: Definition, How It Works, Types and Ways to Invest
Research Guides: Primary Sources: A Research Guide: Primary vs. Secondary
Whas Golf Card
Jail Inquiry | Polk County Sheriff's Office
Poe T4 Aisling
Fort Carson Cif Phone Number
Nfr Daysheet
Get train & bus departures - Android
Dr Lisa Jones Dvm Married
Calamity Hallowed Ore
Irving Hac
Magic Mike's Last Dance Showtimes Near Marcus Cedar Creek Cinema
Crusader Kings 3 Workshop
Nashville Predators Wiki
Craigslist Deming
Are They Not Beautiful Wowhead
Munich residents spend the most online for food
How to Create Your Very Own Crossword Puzzle
Craigslistjaxfl
Ruben van Bommel: diepgang en doelgerichtheid als wapens, maar (nog) te weinig rendement
Trivago Sf
Delaware Skip The Games
Conan Exiles Sorcery Guide – How To Learn, Cast & Unlock Spells
Somewhere In Queens Showtimes Near The Maple Theater
Www.patientnotebook/Atic
Talk To Me Showtimes Near Marcus Valley Grand Cinema
Dewalt vs Milwaukee: Comparing Top Power Tool Brands - EXTOL
Dark Entreaty Ffxiv
27 Modern Dining Room Ideas You'll Want to Try ASAP
NV Energy issues outage watch for South Carson City, Genoa and Glenbrook
Login.castlebranch.com
Craigslist Efficiency For Rent Hialeah
Life Insurance Policies | New York Life
Delta Rastrear Vuelo
Xfinity Outage Map Lacey Wa
Frostbite Blaster
Eleceed Mangaowl
The best Verizon phones for 2024
Sam's Club Gas Prices Florence Sc
Panorama Charter Portal
Trivago Anaheim California
Az Unblocked Games: Complete with ease | airSlate SignNow
Fluffy Jacket Walmart
Kaamel Hasaun Wikipedia
855-539-4712
Race Deepwoken
10 Best Tips To Implement Successful App Store Optimization in 2024
Diccionario De Los Sueños Misabueso
Hsi Delphi Forum
Booked On The Bayou Houma 2023
Latest Posts
Article information

Author: Aracelis Kilback

Last Updated:

Views: 5873

Rating: 4.3 / 5 (44 voted)

Reviews: 83% of readers found this page helpful

Author information

Name: Aracelis Kilback

Birthday: 1994-11-22

Address: Apt. 895 30151 Green Plain, Lake Mariela, RI 98141

Phone: +5992291857476

Job: Legal Officer

Hobby: LARPing, role-playing games, Slacklining, Reading, Inline skating, Brazilian jiu-jitsu, Dance

Introduction: My name is Aracelis Kilback, I am a nice, gentle, agreeable, joyous, attractive, combative, gifted person who loves writing and wants to share my knowledge and understanding with you.