Microsoft adds TPM check to KMS activation to stop fake servers

Microsoft is enhancing its Key Management Service (KMS) activation technology, which is designed for enterprises, by implementing a hardware-backed security model using Trusted Platform Module (TPM) technology. This new KMS Hardware Security initiative will verify that KMS servers operate on trusted hardware before activating any systems. This move aims to combat the risks associated with counterfeit KMS servers that have been exploited for license fraud.

Starting August 2026, Microsoft will begin testing TPM verification, initially for Windows Server 2025, leading to stricter requirements for KMS hosts by future Windows Server releases. While the direct impact on average users is minimal for now, the long-term implications might restrict the ease of setting up KMS servers. Microsoft urges enterprises to prepare for these changes to avoid activation failures.