Активация windows server 2019 datacenter через командную строку

В связи с недавним выходом нового Windows Server 2022 пришла пора обновить инфраструктуру KMS активации в домене, добавив возможность поддержки новых версий Windows Server и Windows 11. В статье мы рассмотрим установку роли Volume Activation Services в Windows Server, настройку и активацию KMS сервера с помощью KMS host key.

Если вы хотите детальнее познакомиться с технологией KMS активации Microsoft, рекомендуем начать со статьи FAQ по KMS активации Microsoft.

Установка роли Volume Activation Services в Windows Server

Для развёртывания собственного KMS сервера вам нужно установить роль Volume Activation Services на любой из хостов с Windows Server 2022, 2019 или 2016. Если у вас в домене уже установлен KMS сервер на базе Windows Server 2016 или Windows Server 2019, можете использовать этот существующий сервер (в этом случае этот раздел можно пропустить).

1. Установите на сервере роль Volume Activation Services из консоли Server Manager или воспользуйтесь следующей PowerShell командой для установки роли:
   Install-WindowsFeature -Name VolumeActivation -IncludeAllSubFeature –IncludeManagementTools
   
2. Включите правило Windows Firewall, которое разрешает доступ к KMS серверу:
   Enable-NetFirewallRule -Name SPPSVC-In-TCP
   (правило открывает доступ к серверу по порту TCP 1688).

Активация KMS сервера Windows Server 2022/2019

Далее вам нужно скопировать ваш персональный ключ KMS host key из личного кабинета Microsoft на сайте Volume Licensing Center и активировать ваш KMS сервер с помощью данного ключа.

1. Авторизуйтесь в личном кабинете на сайте Microsoft Volume Licensing Service Center (VLSC), и перейдите в раздел License -> Relationship Summary -> Выберите License ID для вашего активного контракта Active License -> Product Keys. Скопируйте KMS ключ для Windows Server 2022;

   KMS Host Key для Windows Server 2022 называется Windows Srv 2022 DataCtr/Std KMS (либо используйте ключ Windows Srv 2019 DataCtr/Std KMS для предыдущей версии Windows Server 2019, если у вас нет подписки Software Assurance). Всегда используйте KMS Host Key для максимальной версии Windows Server, доступной в вашем личном кабинете. KMS сервер, активированный более новым ключом сможет активировать все предыдущие версии Windows.

2. Установите новый KMS ключ командой:
   slmgr /ipk <новый_KMS_host_ключ_Windows_Server_2022>

   Совет. Если у вас на этом сервере уже активирован KMS ключ для предыдущей версии Windows Server, сначала его нужно удалить с помощью команды:
   slmgr /upk

3. Активируйте ваш KMS сервер на серверах Microsoft:
   slmgr /ato
   (с сервера должен быть прямой доступ в интернет к серверам активации Microsoft хотя бы на время активации). Либо вы можете активировать KMS сервер по телефону(для этого нужно запустить графическую утилиту Volume Activation Tools);
4. Если вы хотите опубликовать SRV запись KMS сервера в DNS (для автоматического поиска KMS сервера клиентами), выполните команду:
   slmgr /sdns
5. Перезапустите службу Software Protection:
   Restart-Service -Name sppsvc
6. Если вы планируете использовать данный KMS сервер в качестве сервера активации продуктов MS Office, нужно установить специальные лицензионные пакеты для нужных версий Office. Затем нужно указать KMS Host Key для активации редакции Office и активировать KMS сервер (подробные инструкции доступны в статье про KMS активацию Microsoft Office 2019/2016);
7. Проверьте, что ваш KMS сервер активирован успешно:
   slmgr.vbs /dlv
   Убедитесь, что в поле Description указано
   VOLUME_KMS_WS22 channel
   , а в License status –
   Licensed
   .
8. Теперь вы можете актвировать на вашем KMS сервере все поддерживаемые версии Windows, начиная со снятых с поддержки Windows 7 и Windows Server 2008R2 и заканчивая последними версиями Windows 11 и Windows Server 2022).

Обновления Windows Server для поддержки активации Windows Server 2022/2019

Вы можете использовать хосты с предыдущими версиями Windows Server в качестве KMS сервера для активации новых версий Windows Server 2022/2019. Но есть ряд ограничений.

KMS (CSVLK) сервер для активации Windows Server 2022 и Windows 11 (и всех предыдущих версий Windows) можно установить только на Windows Server 2022, 2019 или 2016 (WS 2012R2 не поддерживается).

Кроме того, на Windows Server 2019 или 2016 нужно установить обновление, которое обеспечивает активацию Windows Server 2022. В апреле 2021 года Microsoft выпустила специальное обновление KB5003478: Update to extend KMS support for Windows Server 2022 LTSC. В дальнейшем данное обновление включено в последующие кумулятивные обновления для Windows Server. Это значит, что вам достаточно установить любое кумулятивное обновление Windows Server, выпущенное после июня 2021 года.

• Для Windows Server 2019 — KB5003646 (8 июня 2021) или более позднее
• Для Windows Server 2016 — KB5003638 (8 июня 2021) или более позднее

Если у вас есть KMS host key только для Windows Server 2019, он будет активировать все версии Windows до Windows Server 2019 и Windows 10 включительно. Вы можете установить такой KMS ключ на Windows Server 2019, 2016 или 2012 R2.

На Windows Server 2012 R2 нужно установить обновления:

• KB3173424 — обновление стека обслуживания (Servicing Stack Update) от июля 2016 года;
• Любое накопительное обновление для Windows Server 2012 R2, начиная с 11 декабря 2018 года (KB4471320) или более новое.

Для Windows Server 2016 необходимы следующие обновления:

• KB4132216 — обновление стека обслуживания (Servicing Stack Update) от мая 2018 года;
• Любое накопительное обновление для Windows Server 2016, начиная с 27 ноября 2018 года (KB4467681) или более новое.

После установки обновлений и перезагрузки KMS сервера, вы можете добавить на него новый KMS Host Key и активировать его как описано выше.

Если вы не установили обновления для поддержки KMS активации новых версий Windows Server, то при установке нового ключа Windows Srv 2022 (или 2019) DataCtr/Std KMS с помощью следующей команды появится ошибка:

slmgr /ipk <KMS_host_ключ_Windows_Server_2019>

Error: 0xC004F015 On a computer running Microsoft Windows non-core edition, run ‘slui.exe 0x2a 0xC004F015’ to display the error test.

При этом в журнале событий фиксируется ошибка c текстом:

Installation of the Proof of Purchase failed. 0xC004F015
Partial Pkey=xxxxxxxxxxxx
ACID = xxxID

При активации KMS ключа через GUI появляется ошибка:

Invalid product key or license mismatch.  Please confirm this product key is entered correctly and is valid for this application or Windows edition.

Также ошибка может выглядеть так:

0xC004F050 - The Software Licensing Service reported that the product key is invalid

При попытке активировать любой клиент на таком KMS сервере появится ошибка недоступности сервера активации (
Error code: 0xC004F074 - No Key Management Service (KMS) could be contacted
).

Чтобы исправить данную ошибку, нужно установить последние кумулятивные обновления безопасности на ваш KMS сервер с ролью Volume Activation Services.

GVLK ключи для Windows Server 2019, 2022 и Windows 10 LTSC

В следующей таблице представлен список общедоступных KMS ключей активации (GVLK ключи) для разных редакций Windows Server 2019 и Windows 10 LTSC:

Для установки публичного KMS ключа на компьютер или сервер нужно выполнить команду (где
xxxx
– GVLK ключ из таблицы в зависимости от редакции Windows):
slmgr /ipk xxxxx-xxxxx-xxxxx-xxxxx-xxxxx

Указать KMS сервер для активации можно вручную:
slmgr /skms kms-server2019.winitpro.ru:1688

Для активации ОС на KMS сервере:
slmgr /ato

Проверить статус активации Windows:
slmgr /dlv

Если вы хотите активировать на KMS сервере ранее установленную ознакомительную версию Windows Server 2022, сначала придется конвертировать редакцию согласно гайда.

Microsoft released their newest version of their server operating system almost one year ago on October 2, 2019. I have had Windows Server 2019 running in my lab environment since November 2018. It is certainly not advisable to be on the bleeding edge of technology in your production environment and to test thoroughly any new product before committing to it. Major version releases of operating systems are one such technology that falls squarely into that category.

Here is Microsoft’s comparison chart between 2008 R2, 2012 R2, 2016 and 2019: https://www.microsoft.com/en-us/cloud-platform/windows-server-comparison.

On the surface, Windows Server 2019 looks just about like Windows Server 2016. There aren’t many changes to the user interface between the two operating system environments either so if you are already used to Windows Server 2016, Windows Server 2019 is a familiar face. It is mature enough now after being a year old that I have been putting it into client production environments.

Note: Remember with every major release version change of operating systems (2003 & 2003 R2, 2008 & 2008 R2, 2012 & 2012 R2, 2016, and now 2019) in addition to the basic server licensing, corresponding user CALs (Client Access Licenses) are required to go along with them.

Once you have logged into the Microsoft Volume License Center and acquired the key needed to activate the operating system, it should be as simple as opening Server Manager, navigating to the Local Server page, clicking the Not activated link and punching in the key, right?

With a few recent installations of Windows Server 2019 I have found that even when I’m 100% sure I’ve copy/pasted or typed in the key correctly, it is still not accepted and consequently not activated. Instead of using the GUI, repeatedly unsuccessfully, I have found the command line tool to do the same to be dependably effective. The tool is the Windows Software Licensing Management Tool and can be accesses via elevated command line using slmgr.vbs.

There are a variety of parameters to use with slmgr.vbs including:

1. /dli (This will show basic license and activation information.)
2. /dlv (This will show detailed license and activation information.)
3. /xpr (This will show the current expiration date of the license installed which is most useful when using a KMS key with a local KMS activation server on the network.)
4. /upk (Be careful with this one as it will uninstall your current license key.)
5. /cpky (Also be careful with this one as this removes license key information from the registry.)
6. /ipk *****-*****-*****-*****-***** (This will change your license key to the one entered. If there was no key entered previously this command will also attempt to activate the license based on the license key type.)
7. /ato (This will force an online activation immediately. This could be useful if you have already entered the new key but was not online with either the KMS server for the network or unable to reach Microsoft’s activation servers.)

When a new installation of Windows Server 2019 that is not accepting the key from the GUI, the /ipk parameter is what we would use. From an elevated command prompt, enter (where the asterisks are your actual license key):

slmgr.vbs /ipk *****-*****-*****-*****-*****

Microsoft recommends restarting your server following using this command. Doing these in combination should show an activated server from Server Manager on next boot.

If it does not, run this from an elevated command prompt:

slmgr.vbs /ato

It will likely give you an error with a reason why it wasn’t able to activate using the provided key like this for example:

An issue like the one above will need to be rectified by either using a different MAK key that has activations left, or a call into Microsoft.

Do you have questions? Don’t hesitate to reach out to our IT experts for help!

This publication contains general information only and Sikich is not, by means of this publication, rendering accounting, business, financial, investment, legal, tax, or any other professional advice or services. This publication is not a substitute for such professional advice or services, nor should you use it as a basis for any decision, action or omission that may affect you or your business. Before making any decision, taking any action or omitting an action that may affect you or your business, you should consult a qualified professional advisor. You acknowledge that Sikich shall not be responsible for any loss sustained by you or any person who relies on this publication.

Due to the recent release of the new Windows Server 2022, it’s time to update the KMS activation infrastructure in your domain and add the support of new versions of Windows Server and Windows 11. In this article, we will look at installing the Volume Activation Services role on Windows Server, configuring and activating a KMS server using a KMS Host Key.

If you want to learn more about Microsoft KMS activation, we recommend starting with the article Microsoft KMS Activation FAQ.

Install Volume Activation Services Role on Windows Server

To deploy your own KMS server, you need to install the Volume Activation Services role on any of the hosts running Windows Server 2022, 2019, or 2016. If you already have a KMS server on Windows Server 2016 or Windows Server 2019, you can use this existing server (in this case, this section can be skipped).

1. Install the Volume Activation Services role on your server from the Server Manager console or using the PowerShell command: Install-WindowsFeature -Name VolumeActivation -IncludeAllSubFeature –IncludeManagementTools
2. Enable the Windows Firewall rule that allows to access the KMS server: Enable-NetFirewallRule -Name SPPSVC-In-TCP (this opens access to the server on TCP port 1688).

Activating KMS Server on Windows Server 2022/2019

Next, you need to copy your personal KMS Host Key from your Microsoft account on the Volume Licensing Center website and activate your KMS server using this key.

1. Sign in to your account on Microsoft Volume Licensing Service Center (VLSC) website and go to License -> Relationship Summary -> Select License ID for your Active License contract -> Product Keys. Copy the KMS host key for Windows Server 2022;

   KMS Host Key for Windows Server 2022 is called Windows Srv 2022 DataCtr/Std KMS (or use the Windows Srv 2019 DataCtr/Std KMS key for the previous version of Windows Server 2019 if you do not have Software Assurance subscription). Always use KMS Host Key for the maximum version of Windows Server available in your personal account. KMS server activated with a newer key will be able to activate all previous versions of Windows.

2. Install the KMS host key using the following command in the elevated command prompt: slmgr /ipk <KMS_host_key_Windows_Server_2022>

   Tip. If you already have a KMS key activated for a previous version of Windows Server on this server, you must first remove it using the command: slmgr /upk

3. Activate your KMS server in Microsoft: slmgr /ato (the server must have direct access to the Internet to the Microsoft activation servers at least during the activation). Or you can activate the KMS server by phone (for this you need to run the graphical Volume Activation Tools from the Server Manager);
4. If you want to publish the SRV record of the KMS server in your DNS (for automatic search of the KMS server by clients), run the command: slmgr /sdns
5. Restart the Software Protection service: Restart-Service -Name sppsvc
6. If you are going to use this KMS server to activate Microsoft Office products, you need to install the license packages for the Office versions you have. You can find the detailed instructions in the article KMS activation for Microsoft Office 2019/2016);
7. Make sure your KMS server has been activated successfully. Run the command: slmgr.vbs /dlv Check the following values in the command output: Description = VOLUME_KMS_WS22 channel and License status = Licensed.
8. Now you can use your KMS server to activate all supported Windows starting from Windows 7 and Windows Server 2008R2 (have officially reached the End of Support) and up to the latest versions of Windows 11 and Windows Server 2022).

Updates to Extend KMS Support for Windows Server 2022 and 2019

You can use KMS hosts with previous versions of Windows Server to activate newer versions of Windows Server 2022 or 2019. But there are a number of limitations.

The KMS host (CSVLK) for activating Windows Server 2022 and Windows 11 (and all previous versions of Windows) can only be installed on Windows Server 2022, 2019, or 2016 (WS 2012R2 is not supported).

You need to install additional updates on Windows Server 2019 or 2016 that extend KMS support for Windows Server 2022. In April 2021, Microsoft released a special update KB5003478. This update is added to the latest cumulative updates for Windows Server. This means that you only need to install any cumulative Windows Server 2019/2016 update released after June 2021.

• Windows Server 2019 — KB5003646 (June 8, 2021) or later
• Windows Server 2016 — KB5003638 (June 8, 2021) or later

If you have only a Windows Server 2019 KMS host key, it will activate all Windows versions up to Windows Server 2019 and Windows 10. You can install such a KMS key on Windows Server 2019, 2016, or 2012 R2.

Install these updates on Windows Server 2012 R2:

• KB3173424  — Servicing Stack Update, July 2016;
• Any Windows Server 2012 R2 cumulative update released after December 11, 2018 (KB4471320) or newer.

The following updates are necessary on Windows Server 2016:

• KB4132216 — Servicing Stack Update, May 2018;
• Any Windows Server 2016 cumulative update released after November 27, 2018 (KB4467681) or newer.

After installing updates and rebooting the KMS server, you can install a new KMS Host Key on it and activate it as described above.

If you have not installed updates to support KMS activation of new versions of Windows Server, then when you install a new Windows key Srv 2022 (or 2019) DataCtr/Std KMS using the following command, an error will appear:

slmgr /ipk <KMS_host_key_Windows_Server_2019_or_2022>

Error: 0xC004F015 On a computer running Microsoft Windows non-core edition, run ‘slui.exe 0x2a 0xC004F015’ to display the error test.

At the same time the error with the following description can be found in the Event Viewer logs:

Installation of the Proof of Purchase failed. 0xC004F015
Partial Pkey=xxxxxxxxxxxx
ACID = xxxID

When trying to activate the KMS key via the GUI, the following error appears:

Invalid product key or license mismatch.  Please confirm this product key is entered correctly and is valid for this application or Windows edition.

Also, the error may look like this:

0xC004F050 - The Software Licensing Service reported that the product key is invalid.

When you try to activate any client on such a KMS server, an error will appear that the activation server is unavailable (Error code: 0xC004F074 - No Key Management Service (KMS) could be contacted).

To fix this error, you need to install the latest cumulative security updates on your Windows Server KMS host with the Volume Activation Services role.

GVLK Keys for Windows Server 2022, 2019 and Windows 10 LTSC

The list of public KMS activation keys (GVLK – Generic Volume License Key) for different Windows Server 2022, 2019, and Windows 10 LTSC editions are given in the following table:

To install a public GVLK key on a computer or server, you need to run the command (where xxxx is the GVLK key from the table above, depending on the Windows edition):

slmgr /ipk xxxxx-xxxxx-xxxxx-xxxxx-xxxxx
You can manually specify the address and port of the KMS server on which you want to activate your Windows:

slmgr /skms corp-kms1.woshub.com:1688
To activate your Windows instance on a KMS server:

slmgr /ato
To check Windows activation status:
slmgr /dlv

If you want to activate a previously installed evaluation version of Windows Server 2022 on your KMS server, you first have to convert your Windows Server EVAL edition to the full version according to the guide.

Hi! I’m Graeme Bray and you may remember me from previous articles such as KMS Activation for Windows Server 2016.  Today’s installment will coincide with a new Windows Server release.  I’m going to focus on getting you to enable AD Based Activation for those of you who have not yet done so.

The location for the KMS Host Key is the same as Windows Server 2016.  You need to find the key on the Microsoft Volume License Service Center.

Prerequisites

KMS Activation for Windows Server 2019 can be run from the following Operating Systems with the appropriate prerequisites:

Windows Server 2012 R2

July 2016 Servicing Stack Update: KB3173424 

September 11, 2018 Cumulative Update: KB4457129

Windows Server 2016

May 2018 Servicing Stack Update: KB4132216

August 30, 2018 Cumulative Update: KB4343884

Retrieve KMS License Key from the VLSC for Windows Server 2019

To resolve this problem, follow these steps:

1. Log on to the Volume Licensing Service Center (VLSC).
2. Click License.
3. Click Relationship Summary.
4. Click License ID of your current Active License.
5. After the page loads, click Product Keys.
6. In the list of keys, locate Windows Srv 2019 DataCtr/Std KMS

Install the Volume Activation RSAT Tools

Log into a Windows Server 2012 R2 or Windows Server 2016 Machine

1. Install (or verify) that the RSAT Volume Activation Tools are available.
2. Run Install-WindowsFeature RSAT-VA-Tools
3. Since you still have PowerShell open, launch Volume Activation Tools by typing vmw.exe
4. Click <Next> to skip that Welcome screen that everyone dislikes.
5. Ensure that Active Directory-Based Activation is selected and click <Next>.
6. Enter your Product Key and put the VLSC Product Name in the Display Name object.  This will help with future validation.
7. Click <Next> and then <Commit>.  This will put the key into AD, assuming that you have the proper permissions (Enterprise Admin).

I know, you need *what* to enable AD Based Activation?  Stay tuned for a future article (from yours truly) on how to delegate THAT access.

This is the *only* time that you need to use the CSVLK (KMS Key) to activate a system, at least in this forest.

Client Licensing

Now, if you’re like me, you always do a search for “Appendix A KMS” on your favorite search engine (Bing, of course!).  That takes you to the below link which gives you the appropriate Generic Volume License Key (GVLK) that is hardcoded to each OS to activate.  If you download the ISO from the Volume License Service Center, this key is already in the OS and ready to activate.

Key Management Services (KMS) client activation and product keys

A couple of caveats as far as AD Based Activation:

1. Your systems need to be able to reach the Forest root DC’s if this is in a child domain.
2. You need to have extended the AD Schema to at least Windows Server 2012.

For more details: Activate Using Active Directory-based Activation

Windows Server 2019 Activation: Key Management Services (KMS) activation planning

Now, get going!  Activate Windows Server 2019 in your environment.  Use it in a lab, see what use case scenarios you can find to implement some new features.  You should expect to see more from us on Windows Server 2019 features in the future.

Thanks!

Graeme