How to configure a DMZ server to use your corporate licensing server

Servers in the AD find the KMS server for operating system and Microsoft Office licensing because of DNS.  However, servers in the DMZ do not have access to that, so some manual configuration is required.

You will need to ensure that port 1688 TCP traffic is allowed to pass through from your DMZ environment into your normal production environment so that the licensing can actually take place.

 

On the DMZ server in question, edit the local hosts file and add the two following lines - you will need the IP address of your KMS licensing server and know the host name.

 

<your IP address>    <The fully qualified host name>

<your IP address>   <host name>

 

Save and exit.

 

Then from a command prompt with admin privileges, type in

 

slmgr.vbs /skms <The fully qualified host name>:1688

 

 

Check that the license has activated

 

slmgr.vbs /dli

 

 

If not, type in

 

 

slmgr.vbs /ato    then a   slmgr.vbs /dli  to confirm