VOLUME ACTIVATION
Two Activation Models
Eliminates need for individual
clients to connect and activate with
Microsoft
Product key is pre-installed
on clients
One time activation with Microsoft hosted
service
Supports online, phone and proxy
activation
One MAK key per product per
organization
KMS clients must connect with KMS
host at least once every 180 days to
keep activation current
Transparent end user experience
Capable of activating hundreds of
systems, as long as minimum
threshold is established and
maintained
Flexible options to install MAK on each
PC client
Office Customization Tool (OCT)
Automated install file (Config.xml)
Change key in Backstage
Volume Activation Management
Tool (VAMT) 2.0
Key Management Service (KMS)
for Office 2010 Lab Licenses
•
•
•
•
•
2007 Microsoft Office system and previous versions of Microsoft Office, you had
to enter a product key when you deployed Office. If you use Key Management
Service (KMS), you do not have to do this for Office 2010 because all volume
license editions of Office 2010 have a KMS client key preinstalled.
Allows Office instances to complete activations on their local network, eliminating
the need for to connect to Microsoft for product activation.
KMS Host is a lightweight service that does not require a dedicated system and
can easily be co-hosted on a system that provides other services.
KMS Requires a minimum number of computers (physical or virtual machines) in a
network environment (called minimum threshold).
Instances activated with KMS contact the KMS host once every 180 days
3
Multiple Activation Key (MAK) for
Office 2010 Lab Licenses
– MAK is used for one-time activation with Microsoft’s hosted activation
services. Different from Windows XP Professional Volume License Key
– There are two ways to activate computers using MAK.
• MAK Independent activation, which requires that each computer independently connect
and be activated with Microsoft either over the Internet or by telephone.
• MAK Proxy activation which uses a computer acting as a MAK proxy that gathers
activation information from multiple computers on the network, and then sends a
centralized activation request on their behalf.
• MAK Proxy activation is configured using the Volume Activation Management Tool
(VAMT).
– KMS is the default key for Volume Activation clients. Using MAK activation
requires installing a MAK key using Script, Volume Activation Toolkit, or
Windows Deployment Toolkit.
• MAK is best for users who cannot connect to Institution network
at least every 180 days
4
KMS Host
• One KMS host for Windows and Office
• Highly scalable service (100’s of
thousands)
• Supported KMS host Operating Systems:
Operating System
Windows Server 2003
Office
√
Windows
√
Windows Vista
√
Windows Server 2008
√
Windows 7 (Volume License edition)
√
√
Windows Server 2008 R2
√
√
VL Activation never prevents an enduser from using Office 2010
4
1
Activation
2
Why it’s
important
• Activation establishes a relationship
between the software’s product key and
software on the device
• Activation helps ensure you are using
genuine Office 2010 software, which
gives you access to the latest features
• It provides protection against the
malicious code common in counterfeit
software
Flexible,
compatible
options
5
VA is for
virtual, too
6
3
Familiar
but better
• Volume Activation in Office 2010
builds on Vista and Windows Server
2008
7
Resources
Privacy
and Security
• Two primary methods of Volume
Activation:
• Key Management Services (KMS):
preferred method, self-hosted, selfmaintaining, ideal for vast majority of
environments
• Multiple Activation Key (MAK): machine
independent, hosted by Microsoft
• Virtual machines count toward minimum
req.
• 5 connected systems (PCs, laptops)
• All information is private and not used by
Microsoft or any other party
• Enhanced data security
• Microsoft has a variety of tools to help
make deployment and management
simple and easy
• www.microsoft.com/TechNet/volumeacti
vation
User experience when not activated
User experience in MAK asking for activation
if VAMT is not used to orchestrate activation
User experience in KMS if not activated in
30 days (no UI experience in first 25 days)
Topology guidance
Tools
• Volume Activation Management Tool (VAMT) 2.0
– Search for Windows and Office in the enterprise network
– Deploy product keys to clients
– Proxy MAK activation
– Trigger MAK online and KMS activations
• Software licensing management script (slmgr.vbs)
– Enter KMS host key
– Activate KMS host
– Monitor
• KMS host status
• Number of client activations
Multiple Activation Key (MAK)
Microsoft Hosted
Activation Services
Volume License
Agreement
MAK key available to volume license
customers on request
One Time
External
Internal
VAMT
Install the MAK on the client
Directly
Provisioned by the IT Pro (Image or
Proxy)
Activate with Microsoft
Online (directly or via Proxy)
Phone, SMS text messaging
Perpetual activation
Some conditions may require
reactivation
Image
Key Management Service Process
Microsoft Hosted
Activation Service
Volume License
Agreement
KMS key automatically available to customers
via normal channels
Install KMS key on KMS host machine
One Time
Activate KMS service with Microsoft
- One time activation of KMS host
External
Internal
KMS host registers SRV with DNS
KMS client discovers KMS host
DNS
KMS client activates based on policy
- KMS count ≥ activation threshold
Request
Count
KMS Host
KMS Client
KMS client regularly re-activates
- Non-perpetual activation (180 days)
- Communication between KMS host and
KMS client is never exposed to Microsoft
To Install KMS hosts for KMS Activation
• Choose and install the desired volume licensed
media. No product key is required during setup.
• Start the computer, log on and launch an
elevated Command Prompt.
• Install your KMS key. Do not use the Windows
interface for this. Run the following script:
cscript
C:\windows\system32\slmgr.vbs /ipk <KMS Key>
Command Prompt
Successful KMS Activation
Activate KMS Host
•
•
Activate the KMS host with Microsoft, either using online
activation or telephone activation:
•
For online activation (You must be able to access the Internet from
the computer), run the following script:
cscript C:\windows\system32\slmgr.vbs /ato
•
For telephone activation (if you do not have access to the Internet),
run the following command and follow the on-screen instructions:
slui.exe
The KMS host is now ready to be used by KMS clients for
activation. Additional configuration is optional and will usually not
be required.
To verify the activation by using command : Slmgr -dlv
Additional Technical Resources
• Office Activation Springboard Site
http://technet.microsoft.com/en-us/office/ee691939.aspx
• IPSEC Server Isolation to protect KMS Hosts:
http://technet.microsoft.com/en-us/library/cc723923.aspx
• Reference Guide for slmgr, registry, GPO, Event Log, WMI, Error Codes, etc..
http://technet.microsoft.com/en-us/library/ee355153.aspx
• Activation Error Codes
http://support.microsoft.com/kb/938450
• Office 2010 blog entry for Volume Activation
http://blogs.technet.com/office2010/archive/2009/08/24/volume-activation.aspx
• Office 2010 volume activation deployment guide
http://www.microsoft.com/downloads/details.aspx?familyid=97B7B710-6831-4CE5-9FF5FDC21FE8D965&displaylang=en
• Top activation issues reported to CSS
http://blogs.technet.com/askcore/archive/tags/Activation/default.aspx
Summary
• Activation is required for all volume editions of Microsoft
Office 2010 client
• Customers need to decide between MAK, KMS and Token
(highly secure disconnected environments)
• Office and Windows use the same activation technology