topic Re: Paloalto ms-kms application in General Topics

Paloalto ms-kms application

CHOE-KyungJun — Tue, 03 May 2022 06:05:59 GMT

Dear Team,

The description of the ms-kms application is as follows.

Description
Microsoft Key Management Service (KMS) activates computers on a local network, eliminating the need for individual computers to connect to Microsoft. To do this, KMS uses a client-server topology. KMS client computers can locate KMS host computers by using Domain Name System (DNS) or a static configuration. KMS clients contact the KMS host by using remote procedure call (RPC). KMS can be hosted on computers that are running the Windows Vista, Windows 7, Windows Server 2003, Windows Server 2008, or Windows Server 2008 R2 operating systems.

I would like to know if windows server 2012 and 2016 are also controlled by ms-kms application.

If anyone has any documents or URLs I can refer to, please let me know.

or if anyone has a way to control ms-kms please let me know

Thanks in advance,
Kyungjun,

Re: Paloalto ms-kms application

aleksandar.astardzhiev — Tue, 03 May 2022 06:23:57 GMT

Hi @CHOE-KyungJun ,

I believe this description was written long time ago and never updated.

Howeve I can confirm that ms-kms app-id will work without issues with 2012 and 2016 versions.

Re: Paloalto ms-kms application

CHOE-KyungJun — Tue, 03 May 2022 06:46:26 GMT

Hi @aleksandar.astardzhiev

Thank you for your comment

Did you check that it is controlled by ms-kms app-id in 2012 and 2016?!

I would be grateful if you could share the log with me

Re: Paloalto ms-kms application

aleksandar.astardzhiev — Tue, 03 May 2022 07:21:53 GMT

Hey @CHOE-KyungJun ,

Not sure if I get your last question, but here are some logs targeting KMS running on MS Server 2012

Re: Paloalto ms-kms application

BPry — Tue, 03 May 2022 20:32:07 GMT

@CHOE-KyungJun,

KMS won't be going away anytime soon. You'll find some descriptions in the app-id database that are outdate like this. Essentially if the signatures don't ever need to be updated, it doesn't look like PAN circles back and update the app-id descriptions on a regular basis. (Makes sense really, that would take quite a bit of time that isn't really needed).