Microsoft introduces TPM‑based authentication for Windows KMS activation servers

Microsoft announced that future versions of Windows Server will require Key Management Service (KMS) hosts to prove their identity with a Trusted Platform Module (TPM) chip. The TPM‑based check will verify the hardware integrity of the KMS server before it can process activation requests for Windows devices, aiming to block counterfeit KMS servers that enable illegal copies of the operating system.

The new requirement will become mandatory with the next Windows Server release, and administrators of Windows Server 2025 will begin receiving preparation notices in August 2026. By tying KMS activation to hardware‑rooted security, Microsoft expects to reduce the effectiveness of widely used online KMS cracking tools that target enterprise deployments.