KMS Activation

Quick guides for download

The following two quick guides provide an overview of the process for end users and administrators.

End-User-Guide (german): An illustrated quick start guide for end users with admin rights
Admin-Guide (german): An illustrated quick guide for administrators who want to automate activation
End-User-Guide (english - machine translated): An illustrated quick start guide for end users with admin rights
Admin-Guide (english - machine translated): An illustrated quick guide for administrators who want to automate activation

General

Microsoft products must be activated regularly via our TU-internal KMS server. In order to activate the software on the KMS server, you must be connected to TUnet and TUshop (VPN from outside the TU network) and have access to the activation server. This can be done in the activation script in a separate section of your upTUdate account. The activation is valid for approximately 10 minutes.

If you encounter problems during activation, please check that you are using the latest activation script. For both Windows and Office products, the activation script is part of the TUtoolbox. As the new activation script is much easier to use and also offer a significantly improved log function, only the new activation script can be supported.

If you encounter problems activating KMS, please install the latest script (for ALL Windows operating systems with TUtoolbox) and try activating again. If the problem persists, please use the integrated support function to create a ticket.

In general, please note that an (institutional) firewall may prevent activation. A connection to kms.tuwien.ac.at:1700 and shop.tusoftware.tuwien.ac.at:7777 must ALWAYS be possible after activation a connection to kms.tuwien.ac.at:1688 is necessary. Please also note that your order must first be approved and provisioned before you can activate it. You can test the connection to the KMS server with the Portchecker tool, which is also included in the TUtoolbox.

Execution

Start the Microsoft activation script and follow the instructions. The activation process for Windows and Office products differs from the start. After you have selected the product group, some data will be collected to identify any potential problems in advance. You may therefore be asked whether you want a correction to be applied automatically. It is also possible that the script may terminate due to an unresolvable error. In this case, please follow the troubleshooting instructions.

Normally, you will see the current activations after data collection. You can start the activation using the Activate button.

If your computer is already linked to licenses/bookings in the TUshop, the activation process will run without any further input. If assignments are missing, you will be asked if you want to create them. Activation is not possible without an assignment.

The computer only needs to be assigned to a license/booking once. After assignment, you will see the assigned computer in the TUshop and can also disconnect it again in the TUshop. If you are a license-responsible person, you can link the computer to all licenses in your area.

Impact

Please also note that the activation script changes some security-related settings. These include:

Support information
time server
TU WSUS as update source
update settings
Security settings for TU servers

For servers, users are asked to reboot before updates are installed; for desktops, a reboot is forced daily from 5 a.m.

Special use of the activation script

In addition to mainstream use, there are also some special cases where the standard behavior of the activation script must be customized. The following command line arguments are available for this purpose:

-skipreg: No registry values are changed.
-noupdates: Updates are suppressed via the registry. This also affects notifications about updates.
-deinstall: The registry entries will be deleted.
-timeout=xxxx: The internal timeout is set (e.g. for slow connections) to the value in ms.
-silent: Use silent mode to activate
-verysilent: Use Very Silent Mode to activate
-ensure: Wait for a network connection before starting activation is started.
-windows: Windows is being activated
-office: The Office products are activated.
-force: Fixes minor issues that occur during activation (missing log directory, time differences, etc.).
-register: No activation takes place. The remaining arguments (all except “-register”) are used to create an entry in the task scheduler.

All other switches are for internal purposes only and should not be used.

Supported Products

Following products (SKUs with GVLK) are officially supported by the activation tool:

Windows 10/11 Education: NW6C2-QMPVW-D7KKK-3GKT6-VCFB2
Windows 10/11 Professional Education: 6TP4R-GNPTD-KYYHQ-7B7DP-J447Y
Windows Server 2022 Standard: VDYBN-27WPP-V4HQT-9VMD4-VMK7H
Windows Server 2022 Datacenter: WX4NM-KYWYW-QJJR4-XV3QB-6VM33
Windows Server 2025 Standard: TVRH6-WHNXV-R9WG3-9XRFY-MY832
Windows Server 2025 Datacenter: D764K-2NDRG-47T6Q-P8T8W-YP6DF
Office LTSC 16 Professional Plus: XQNVK-8JYDB-WJ9W3-YJ8YR-WFG99
Office LTSC 19 Professional Plus: NMMKJ-6RK4F-KMJVX-8D9MJ-6MWKP
Office LTSC 21 Professional Plus: FXYTK-NJJ8C-GB6DW-3DYQT-6F7TH
Office LTSC 24 Professional Plus: XJ2XN-FW8RK-P4HMP-DKDBV-GCVGB
Visio LTSC 16 Professional: PD3PC-RHNGV-FXJ29-8JK7D-RJRJK
Visio LTSC 19 Professional: 9BGNQ-K37YR-RQHF2-38RQ3-7VCBB
Visio LTSC 21 Professional: KNH8D-FGHT4-T8RK3-CTDYJ-K2HT4
Visio LTSC 24 Professional: B7TN8-FJ8V3-7QYCP-HQPMV-YY89G
Project LTSC 16 Standard: GNFHQ-F6YQM-KQDGJ-327XX-KQBVC
Project LTSC 16 Professional: YG9NW-3K39V-2T3HJ-93F3Q-G83KT
Project LTSC 19 Professional: B4NPR-3FKK7-T2MBV-FRQ4W-PKD2B
Project LTSC 21 Professional: FTNWT-C6WBT-8HMGF-K9PRX-QV9H8
Project LTSC 24 Professional: FQQ23-N4YCY-73HQ3-FM9WC-76HF4

These keys are not a replacement for KMS activation.

Registry-Changes

Following Registry changes are made in special cases by the activation tool:

If -deinstall is defined (Following changes only):: Remove 'HKLM:\SYSTEM\CurrentControlSet\Services\wuauserv' 'Start'; Remove 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Servicing' 'RepairContentServerSource'; Remove 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'NoAutoUpdate'; Remove 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'AUOptions'; Remove 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'ScheduledInstallDay'; Remove 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'ScheduledInstallTime'; Remove 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'RescheduleWaitTime'; Remove 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'NoAutoRebootWithLoggedOnUsers'; Remove 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'UseWUServer'; Remove 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update' 'AUOptions'; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' 'VLActivationInterval'; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' 'VLRenewalInterval'; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' 'SkipRearm'; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' 'KeyManagementServiceName'; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' 'KeyManagementServicePort'; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Activation' 'Manual'; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Activation' 'NotificationDisabled'; Remove 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Servicing' 'RepairContentServerSource'; Remove 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation'; Set-Default 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers' '1'; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers' '1' 'at.pool.ntp.org'; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers' '2' 'time.windows.com'; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers' '3' 'time.nist.gov'; Remove 'HKCU:\Software\Microsoft\Office\16.0\Outlook\Options\General' 'HideNewOutlookToggle'
If 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap' 'IEHarden' has value 1:: Set 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\tuwien.ac.at\products.tusoftware' '*' 1 DWORD; Set 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\tuwien.ac.at\*.login' '*' 1 DWORD; Set 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\tuwien.ac.at\*.zid' '*' 1 DWORD; Set 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\EscDomains\tuwien.ac.at\*.it' '*' 1 DWORD; Set 'HKCU:\Software\Microsoft\Office\16.0\Outlook\Options\General' 'HideNewOutlookToggle' 1 DWORD
Else:: Set 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\tuwien.ac.at\products.tusoftware' '*' 1 DWORD; Set 'HKCU:\Software\Microsoft\Office\16.0\Outlook\Options\General' 'HideNewOutlookToggle' 1 DWORD
If Windows is getting activated and -skipreg is not defined:: Set 'HKLM:\SYSTEM\CurrentControlSet\Services\wuauserv' 'Start' 2 DWORD; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Servicing' 'RepairContentServerSource' 2 DWORD; Set 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate' 'WUServer' 'https://msus.tuwien.ac.at:8531'; Set 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate' 'WUStatusServer' 'https://msus.tuwien.ac.at:8531'; (with -noupdates) Set 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'NoAutoUpdate' 1 DWORD; (without -noupdates) Set 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'NoAutoUpdate' 0 DWORD; (if Windows-Server) Set 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'AUOptions' 3 DWORD; (if not Windows-Server) Set 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'AUOptions' 4 DWORD; Set 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'ScheduledInstallDay' 0 DWORD; Set 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'ScheduledInstallTime' 5 DWORD; Set 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'RescheduleWaitTime' 3 DWORD; Set 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'NoAutoRebootWithLoggedOnUsers' 1 DWORD; Set 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU' 'UseWUServer' 1 DWORD; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update' 'AUOptions' 4 DWORD; Remove 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Critical Update' 'SelfUpdServer'; Remove 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Critical Update\Critical Update SelfUpdate' 'SelfUpdServer'; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' 'VLActivationInterval' 0x5a0 DWORD; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' 'VLRenewalInterval' 0x2760 DWORD; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' 'SkipRearm' 0 DWORD; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' 'KeyManagementServiceName' 'kms.tuwien.ac.at'; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform' 'KeyManagementServicePort' '1688'; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Activation' 'Manual' 1 DWORD; Set 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\Activation' 'NotificationDisabled' 0 DWORD; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Servicing' 'RepairContentServerSource' 2 DWORD; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation' 'HelpCustomized' 0 DWORD; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation' 'SupportProvider' 'TU Wien - CIT'; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation' 'SupportPhone' '+43 1 58801 42002'; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation' 'SupportHours' 'Montag - Freitag von 8 - 16 Uhr'; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation' 'SupportURL' 'https://www.it.tuwien.ac.at/service_center/'; Set-Default 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers' '1'; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers' '1' 'tutimea.tuwien.ac.at'; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers' '2' 'tutimeb.tuwien.ac.at'; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers' '3' 'tutimec.tuwien.ac.at'; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers' '4' 'ts1.aco.net'; Set 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers' '5' 'at.pool.ntp.org'; Set 'HKLM:\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient' 'Enabled' 1 DWORD; Set 'HKLM:\SYSTEM\CurrentControlSet\Services\W32Time\TimeProviders\NtpClient' 'SpecialPollInterval' 0x15180 DWORD

Version history of the activation script

2.1.0.6

Optional possibility to install basic Windows Server Standard licenses on a VM

2.1.0.5

Changes for Windows Server Standard VMs

2.1.0.4

Changes to the license references for the TUshop

2.0.5.3

Security Patch für 'New Outlook App' wurde integriert.

2.0.5.2

Workaround for Windows ARM activations on MacOS where no client type can be determined.

2.0.5.1

Additional tool tips before starting activations.
Links in the texts on the welcome page open a browser.

2.0.5.0

Display of a help button
Display the command line switches used on the start page
New option to suppress updates via registry
No forced reboot for servers
Changes to support information