Solved

Errors with KMS Activation

Posted on 2015-02-13
9
74 Views
Last Modified: 2015-02-26
Recently my KMS host on windows server 2012 quit issuing licenses.  I followed the MS procedure for my new KMS clients but they return an error stating they are unable to contact the KMS host.  I verifed the software protection services is running, the firewall is turned off(temporarily), and i verified the proper DNS records are present.  I can successfully check the license status of all my clients using the Volume Activation Management Tool and change product keys as well.  Any suggestions?
0
Comment
Question by:bullfrog264
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
9 Comments
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 40608340
Triple checking, just because I'd say there's a fair chance it something you already know, but is getting overlooked.
(1) "i verified the proper DNS records are present"
With apologies, lets check one more time from the client.  In nslookup on one of the clients which is exhibiting the problem... open up nslookup, and tell it to 'set type=all'.  Then '_vlmcs._tcp'
Hopefully you'll get your SRV record.  Close nslookup, and Ping the <srv hostname> that was returned... (and it's possible you're filtering icmp... no big deal, I'd really care that the exact name resolve the way you expect on that machine.)
(2) 'telnet <svr hostname> <port>' from that same client.  (You may need to install the telnet client on that workstation.)  If you get back nothing useful, but at least connect... that counts as success.  If you get connection refused... this is the path we'll need to pursue.
0
 
LVL 1

Author Comment

by:bullfrog264
ID: 40608412
I just ran the nslookup and it did return the SRV record.  I ran telnet from one of the clients and I don't get a connection refused it just sits at connecting until i hit the escape characters.
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 40608508
Well shoot.  That takes out all the easy fixes.  :-)  The error message says KMS isn't available, and it obviously is.

On the KMS server, in Event Viewer, "Application and Services Logs", "Key Management Service" -- what are the recent records?  (I.e. do you have ANY informational messages that "An activation request has been processed. [...]"?  Any errors/warnings?)

On the client, check the application error log, is there an event ID 12288 registered that might have more error information?
0
Has Powershell sent you back into the Stone Age?

If managing Active Directory using Windows Powershell® is making you feel like you stepped back in time, you are not alone.  For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why.

 
LVL 1

Author Comment

by:bullfrog264
ID: 40608572
There is an event I'd for on the client for 12288 but it says the exact same error message.  The Kms host shows activation requests in the event viewer but none from my client.
0
 
LVL 30

Assisted Solution

by:Rich Weissler
Rich Weissler earned 250 total points
ID: 40608589
So other clients are working, and are able to get to the KMS server and register.
Ports are open from this client.
I'm assume the problem clients aren't of a different operating system, and have the same DNS suffix defined.

From one of the problem clients, if you manually specify "slmgr.vbs /skms <servername>:<port>" does it register?  (And if you want to clear that at some point in the future, it's just be "slmgr.vbs /ckms")
0
 
LVL 1

Author Comment

by:bullfrog264
ID: 40608716
I did that and it successfully added the KMS but now I get a similiar error.  Running the slui.exe command tells me the same thing.  The KMS host is unavailable.
kms-error.png
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 40608766
Okay, now we're into odd possibilities:
Is the time on the client terribly off the time on the server?
The activation requests which are being processed by KMS successfully -- are they the same client version as the client which is having difficulty?
When you do a ping <kms servername> from the problem client, does it resolve to an IPv6 address?
If you do a tracert <kms servername>, does the request follow a path you expect?
0
 
LVL 58

Accepted Solution

by:
Cliff Galiher earned 250 total points
ID: 40608808
Not to overlook the obvious. What OS are you trying to activate?  A 2012 KMS server will *not* activate 2012 R2 or 8.1 clients out of the box (because those OSes hadn't shipped when 2012 KMS functionality was first written.)  You must install an update to allow an older KMS host to activate a newer client:

http://support.microsoft.com/kb/2885698
0
 
LVL 1

Author Comment

by:bullfrog264
ID: 40633275
I did install the proper updates and the proper keys.  I was able to correct the issue by reactivating the host in KMS.  After that I was able to reapply the automatic virtual machine activation key.  They are activating properly.  I moved all of the VMs to another host and they activated with no issue.
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Issue: One Windows 2008 R2 64bit server on the network unable to connect to a buffalo Device (Linkstation) with firmware version 1.56. There are a total of four servers on the network this being one of them. Troubleshooting Steps: Connect via h…
Understanding the various editions available is vital when you decide to purchase Windows Server 2012. You need to have a basic understanding of the features and limitations in each edition in order to make a well-informed decision that best suits y…
In this Micro Tutorial viewers will learn how to restore single file or folder from Bare Metal backup image of their system. Tutorial shows how to restore files and folders from system backup. Often it is not needed to restore entire system when onl…
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question