Hi everybody,

is there a Management Pack for Microsoft KMS (Key Managment Service) available?

I know there is a Management Pack for SCOM 2007!

Environment:

OS: Windows Server 2012 (KMS Host)
SCOM: OpsMgr 2012 SP1 (probably soon OpsMgr 2012 R2)

I thought, that Microsoft provides a Management Pack for each new product.
But that seems probably to vote only in theory ;-)

Kind regards, Haecki

• Edited by Peter Häcker [PwC] Wednesday, July 30, 2014 7:34 AM

Hi,

There is no KMS MP for SCOM2012 at the moment

Microsoft Management Packs

http://social.technet.microsoft.com/wiki/contents/articles/16174.microsoft-management-packs.aspx

Hi!

The MP for KMS 2008 works for KMS on WS2012 as well.

Just create a new string value "KeyManagementServiceVersion" with the value "dummy" (or anything else) under
HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform

After that the MP will discover the KMS. Just give it time (24h), restart agent or override the discovery interval temporarily.

Cheers,
Patrick

Is this done on the KMS or Management server? I've got multiple KMS and management servers so which and do I add it to each server, KMS or SCOM?

tia

That needs to be done on every KMS.

Cheers,
P

Before seeing this response I had gone and removed that change from the server. As it stands right now I have just the default KMS MP in place on my SCOM 2012 R2 RU3 environment. I notice first that I only get alerts on a few servers, which in this case happen to be 2012 servers. This is the only alert I get on each of these 5 discovered servers:

Alert: Key Management Service is not running
Source: sppsvc
Path: server.mydomain.com
Last modified by: System
Last modified time: 1/30/2015 7:27:30 PM Alert description: Not Present

1. The first thing to note is that KMS is configured to use Active Directory Based Activation so I'm not if this makes a difference. 

2. I have three servers, kmsrvr1.mydomain.com, 2 & 3, which are all 2012 R2. I don't see any of these servers listed. Wondering if this is due to the registry change needing to take place and will confirm in a few.

3. If I can see these 5 W2K12 servers is this change still necessary?

Any responses appreciated.

Ad 1: don't think so but can't tell you for sure.

Ad 2: yes, the discovery will run every 24h. Sure, you could change the interval using overrides.

Ad 3: In that case it seems that they are discovered. Are any monitors/rules running correctly?

Here's the link to my initial blog post: http://www.systemcenterrocks.com/2014/12/kms-mp-for-kms-running-on-ws2012.ht

3. Not sure why then am I getting the "Alert: Key Management Service is not running"  error on servers which are not KMS servers. This error repearts on these same 5 servers and I get nothing from the other KMS servers. I haven't made changes to any monitors / rules nor did I see any mention in your blog post. Maybe I overlooked something?

ti

So it looks like the mentioned RegKey has been found on the 5 servers (but not on the KMS server itself). Could you please check that?

/patrick