XADM: How to Change The KMS Service Password Startup Location

ID: Q196129

The information in this article applies to:

SUMMARY

During the initial installation of the Microsoft Exchange Key Management Server (KMS) service, the administrator will have a choice to store the KMS service password on a disk or to remember the password by writing it down on a secured piece of paper.

When the administrator selects to store the password on a secure disk; each time the KMS service is started, the administrator will be prompted to supply the disk that contains the KMS service password.

When the administrator selects to save the KMS service password on a secured piece of paper; before starting the KMS service, the administrator will need to manually type the KMS password in the startup parameters box located at the bottom of the services window.


MORE INFORMATION

The choice made during the initial setup of the Microsoft Exchange Key Management Server is stored in the Windows NT registry and can be altered. The steps outlined below will make the KMS service point to a diskette instead of the startup parameters box:

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys And Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it.

  1. Start Registry Editor (Regedt32.exe), and go to the following subkey: 
    
      HKEY_LOCAL_MACHINE\Software\Microsoft\Exchange\KMServer


  2. On the Edit menu, click String, and then type the following:
    A:\ then click OK.


  3. Quit Registry Editor.


The KMS service will now look to drive A for the KMS password.

Additionally, the administrator will need to create a disk that contains the KMS service password inside a text file named Kmserver.pwd.

The Kmserver.pwd text file should only contain the KMS service password given to the Exchange Server administrator during the initial setup of Microsoft Exchange Key Management Server.

Removing the drive letter from the MasterPasswordPath value will cause the Exchange Server administrator to manually type the KMS service password in the startup parameter box each time the KMS service is started.

Additional query words: KMServer Setup install Encryption 


Keywords          : 
Version           : WinNT:5.5
Platform          : winnt 
Issue type        : kbhowto kbinfo

Last Reviewed: May 6, 1999