After the release of Windows 11, Microsoft forced the entire Windows ecosystem to use the Trusted Platform Module (TPM). Now, Redmond is taking advantage of the Trusted Platform Module to further strengthen the Windows activation process.
Microsoft recently announced a new addition to Key Management Service (KMS), a standard feature for mass activation of Windows devices in enterprises and other large organizations. KMS will soon use hardware security, with the cryptographic “brain” of TPM to verify the legitimacy of the server hosting the KMS data.
Redmond said that some people are abusing KMS to fake the activation process, which is both a security issue and a way for individual users to avoid paying for a new Windows license. The new “TPM-based attestation” option will use the TPM to verify the cryptographic proof of the integrity of a KMS server.
The TPM-based authentication will first verify the hardware identity of the KMS host, proving that the server has been verified by Microsoft as a legitimate device. The feature will then verify that the KMS host has not been compromised in any way. Finally, the TPM chiplet will allow the now-verified KMS host to handle bulk activation requests.
TPM authentication will become a mandatory requirement for KMS activation starting with the next version of Windows Server, Microsoft said. The company will begin pushing enterprise customers by communicating “readiness messages” in Windows Server 2025, starting in August 2026. System administrators should adapt and prepare their organizations in advance by checking whether their KMS infrastructure is ready for hardware-based activations.
"As Windows security continues to evolve, trusted activation infrastructure will play an increasingly important role," Microsoft said.
Popular tools designed to activate pirated copies of Windows have been using KMS-based methods for some time.
The Massgrave team provides open source tools for "unofficial" Windows activation processes, including an Online KMS method.
The confirmation using TPM could be the end of KMS piracy, although we'll have to wait and see how the story ends. Massgrave recently introduced the new activation method TSforge, which is reportedly able to bypass Microsoft's entire DRM architecture for activating software products.
Although the press releases will range from very select to rare, I said I'd pass...because sometimes the editors hide.
