Solved

Errors with KMS Activation

Posted on 2015-02-13
9
75 Views
Last Modified: 2015-02-26
Recently my KMS host on windows server 2012 quit issuing licenses.  I followed the MS procedure for my new KMS clients but they return an error stating they are unable to contact the KMS host.  I verifed the software protection services is running, the firewall is turned off(temporarily), and i verified the proper DNS records are present.  I can successfully check the license status of all my clients using the Volume Activation Management Tool and change product keys as well.  Any suggestions?
0
Comment
Question by:bullfrog264
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 4
  • 4
9 Comments
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 40608340
Triple checking, just because I'd say there's a fair chance it something you already know, but is getting overlooked.
(1) "i verified the proper DNS records are present"
With apologies, lets check one more time from the client.  In nslookup on one of the clients which is exhibiting the problem... open up nslookup, and tell it to 'set type=all'.  Then '_vlmcs._tcp'
Hopefully you'll get your SRV record.  Close nslookup, and Ping the <srv hostname> that was returned... (and it's possible you're filtering icmp... no big deal, I'd really care that the exact name resolve the way you expect on that machine.)
(2) 'telnet <svr hostname> <port>' from that same client.  (You may need to install the telnet client on that workstation.)  If you get back nothing useful, but at least connect... that counts as success.  If you get connection refused... this is the path we'll need to pursue.
0
 
LVL 1

Author Comment

by:bullfrog264
ID: 40608412
I just ran the nslookup and it did return the SRV record.  I ran telnet from one of the clients and I don't get a connection refused it just sits at connecting until i hit the escape characters.
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 40608508
Well shoot.  That takes out all the easy fixes.  :-)  The error message says KMS isn't available, and it obviously is.

On the KMS server, in Event Viewer, "Application and Services Logs", "Key Management Service" -- what are the recent records?  (I.e. do you have ANY informational messages that "An activation request has been processed. [...]"?  Any errors/warnings?)

On the client, check the application error log, is there an event ID 12288 registered that might have more error information?
0
Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

 
LVL 1

Author Comment

by:bullfrog264
ID: 40608572
There is an event I'd for on the client for 12288 but it says the exact same error message.  The Kms host shows activation requests in the event viewer but none from my client.
0
 
LVL 30

Assisted Solution

by:Rich Weissler
Rich Weissler earned 250 total points
ID: 40608589
So other clients are working, and are able to get to the KMS server and register.
Ports are open from this client.
I'm assume the problem clients aren't of a different operating system, and have the same DNS suffix defined.

From one of the problem clients, if you manually specify "slmgr.vbs /skms <servername>:<port>" does it register?  (And if you want to clear that at some point in the future, it's just be "slmgr.vbs /ckms")
0
 
LVL 1

Author Comment

by:bullfrog264
ID: 40608716
I did that and it successfully added the KMS but now I get a similiar error.  Running the slui.exe command tells me the same thing.  The KMS host is unavailable.
kms-error.png
0
 
LVL 30

Expert Comment

by:Rich Weissler
ID: 40608766
Okay, now we're into odd possibilities:
Is the time on the client terribly off the time on the server?
The activation requests which are being processed by KMS successfully -- are they the same client version as the client which is having difficulty?
When you do a ping <kms servername> from the problem client, does it resolve to an IPv6 address?
If you do a tracert <kms servername>, does the request follow a path you expect?
0
 
LVL 58

Accepted Solution

by:
Cliff Galiher earned 250 total points
ID: 40608808
Not to overlook the obvious. What OS are you trying to activate?  A 2012 KMS server will *not* activate 2012 R2 or 8.1 clients out of the box (because those OSes hadn't shipped when 2012 KMS functionality was first written.)  You must install an update to allow an older KMS host to activate a newer client:

http://support.microsoft.com/kb/2885698
0
 
LVL 1

Author Comment

by:bullfrog264
ID: 40633275
I did install the proper updates and the proper keys.  I was able to correct the issue by reactivating the host in KMS.  After that I was able to reapply the automatic virtual machine activation key.  They are activating properly.  I moved all of the VMs to another host and they activated with no issue.
0

Featured Post

Are your AD admin tools letting you down?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Background Information Recently I have fixed file server permission issues for one of my client. The client has 1800 users and one Windows Server 2008 R2 domain joined file server with 12 TB of data, 250+ shared folders and the folder structure i…
Know what services you can and cannot, should and should not combine on your server.
In this video, we discuss why the need for additional vertical screen space has become more important in recent years, namely, due to the transition in the marketplace of 4x3 computer screens to 16x9 and 16x10 screens (so-called widescreen format). …
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question