XADM: How to Change the KMS Service Password Startup Location

ID: Q196129

The information in this article applies to:
  • Microsoft Exchange Server, version 5.5
IMPORTANT: This article contains information about editing the registry. Before you edit the registry, make sure you understand how to restore it if a problem occurs. For information about how to do this, view the "Restoring the Registry" Help topic in Regedit.exe or the "Restoring a Registry Key" Help topic in Regedt32.exe.

SUMMARY

During the initial installation of the Microsoft Exchange Key Management Server (KMS) service, you are given a choice of whether you want to store the KMS service password on a disk or to write the password on a secured piece of paper.

If you choose to store the password on a secure disk, every time the KMS service starts you are prompted to supply the disk that contains the KMS service password.

If you choose to save the KMS service password on a secured piece of paper, before you start the KMS service you need to manually type the KMS password in the startup parameters box located at the bottom of the services window.


MORE INFORMATION

The choice that you make during the initial setup of the Microsoft Exchange Key Management Server is stored in the Windows NT registry and can be altered. Perform the following steps to make the KMS service point to a diskette instead of the startup parameters box:

WARNING: Using Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that problems resulting from the incorrect use of Registry Editor can be solved. Use Registry Editor at your own risk.

For information about how to edit the registry, view the "Changing Keys and Values" Help topic in Registry Editor (Regedit.exe) or the "Add and Delete Information in the Registry" and "Edit Registry Data" Help topics in Regedt32.exe. Note that you should back up the registry before you edit it. If you are running Windows NT, you should also update your Emergency Repair Disk (ERD).

  1. Start Registry Editor (Regedt32.exe), and go to the following subkey:


    2. HKEY_LOCAL_MACHINE\Software\Microsoft\Exchange\KMServer
  2. In the right pane, double-click MasterPasswordPath.


  3. In the String box, type the following:


    4. A:\
  4. Click OK.


  5. In the right pane, double-click BackupPasswordPath.


  6. In the String box, type the following:


    7. A:\
  7. Click OK.


  8. Quit Registry Editor.


After you perform these steps the KMS service looks to drive A for the KMS password.

Additionally, you need to create a disk that contains the KMS service password inside a text file named Kmserver.pwd.

The Kmserver.pwd file must only contain the KMS service password that is given to the Exchange Server administrator during the initial setup of Microsoft Exchange Key Management Server.

If you remove the drive letter from the MasterPasswordPath value, you must manually type the KMS service password in the startup parameter box every time that the KMS service is started.

Additional query words: KMServer Setup install Encryption

Keywords : exc55
Version : winnt:5.5
Platform : winnt
Issue type : kbhowto kbinfo


Last Reviewed: February 1, 2000
© 2000 Microsoft Corporation. All rights reserved. Terms of Use.