In this post, I will explain how to Install VAMT Activate Windows 7 ESU keys using VAMT | SCCM. Let’s learn how to install and activate VAMT (Volume Activation Management Tool) and how to automatically activate Windows 7 devices for extended security updates (ESU).
Microsoft announced the end of Windows 7 on January 14, 2020. It allowed us to either migrate to Windows 10 or buy, purchase, and install an Extended Security Update(ESU) for Windows 7. Every environment has a different point and process for deploying and servicing Windows.
I know this blog is a bit late, but for many, extending support for the second year will be required as we have not all migrated to Windows 10, so I thought I would post it.
Many organizations have already implemented it, but I do not see many posts on how to use the Volume Activation Management Tool(VAMT) to activate it and the issues that are faced.
- Windows 7 Extended Security Update Step-by-Step Prerequisite Guide
- Windows 11 Version Numbers Build Numbers Major Minor Build Rev
- Windows 10 Version Numbers Build Numbers Major Minor Build Rev
- Windows 10 Shortcut Keys Keyboard Shortcuts
- Windows 10 Product Key Change Home to Professional Upgrade | Activate.
VAMT Activate Windows 7 ESU keys
There are two types of activation:’ Online Activation’ for machines connected to the Internet and ‘Proxy activation’ (some environments have their devices behind a firewall and have no Internet).
In this post, I assume you already have the new key to install; we will cover the technical part of using VAMT to activate that new key. For more details on buying Extended Security Updates, visit Microsoft Volume Licensing.
ESU Key activation Prerequisites – VAMT Activate Windows 7 ESU keys
- Install the SSU listed below (or a later SSU) and the ESU licensing preparation package: Windows 7 SP1 and Windows Server 2008 R2 SP1
- Windows Server 2008 SP2:
Note: Once a servicing stack update is installed, it cannot be removed or uninstalled from the machine.
VAMT and its Prerequisites
The Volume Activation Management Tool (VAMT) enables network administrators and IT professionals to automate and centrally manage Windows and Microsoft Office and select additional Microsoft product volume and retail-activation processes.
VAMT can manage volume activation using Multiple Activation Keys (MAKs) or the Windows Key Management Service (KMS). The diagram below illustrates three everyday environments. For a better understanding, check Introduction to VAMT.
Important: VAMT is designed to manage volume activation for Windows 7, Windows 8, Windows 8.1, Windows 10, Windows Server 2008 (or later), and Microsoft Office 2010 (or above). VAMT is only available in an EN-US (x86) package.
VAMT Requirements –Product Key
Product Key Types:
- Multiple Activation Key (MAK)
- Key Management Service (KMS) host key (CSVLK)
- KMS client setup keys (GVLK)
System Requirements
- 1 GHz x86 or x64 processor
- 1 GB RAM for x86 or 2 GB RAM for x64
- 16 GB available hard disk space for x86 or 20 GB for x64
- Display 1024×768 or higher resolution monitor
- Network Connectivity to remote computers via Windows Management Instrumentation (TCP/IP) and Microsoft Activation Web Service on the Internet via HTTPS
- Operating System – Windows 7, Windows 8, Windows 8.1, Windows 10, Windows Server 2008 R2, Windows Server 2012, or later. If installing on Windows Server 2008 R2, you must also install .NET Framework 3.5.
Installing and Configuring VAMT
VAMT can be installed as part of the Windows Assessment and Deployment Kit (ADK) for Windows 10. It requires local administrator privileges on all managed computers to deposit confirmation IDs (CIDs), check the client product license status, and install product keys.
Installing VAMT
- Download ADK for Windows 10 VAMT 3.1, which comes with the Windows automated deployment toolkit Windows 10 ADK Setup.
- Run the ADK Setup
If required, run the .NET framework 4.5 installations.
Accept the agreement and Install
Select Volume Activation Management tool and SQL Express, click on install and wait for a successful installation.
If you want, you can install SQL Server Express individually. For example, you can install SQL Express 2017 on Windows 10 machines and SQL Express 2014 on Windows 7.
Configuring VAMT for the First-Time Use
Once installed, open it. It will prompt you to specify database details; click on Create New Database and provide the name of the Database as VAMT. It will create the database and connect it to VAMT.
For remote SQL servers, use the complete FQDN, such as servername.domain.com. Once Launched, it will show as below
Adding and Activating Product Keys
Adding Product Key: Once VAMT is launched, right-click the Product key and select Add Product Key; a window will open. Enter your Product Key and click ‘ADD KEY(S).’
You can now see your product key has been added.
Activating Product Key: After adding the Product key, you need to discover the product, install the product key, and then activate it using VAMT.
Select your domain, enter your computer name and click on search.
This will discover the machine in VAMT.
Tip: To discover more than one machine in VAMT, use Machine1, Machine2, and Machine3 and click on search.
Right-click on the machine and select Update License Status using current or alternate credentials.
This will collect the product information and give you the status. In my case, I have already installed the MAK key, so it is showing as Licensed and Genuine.
In your case, the new key has not been installed, so you can right-click on the machine and select ‘Install Product Key’. This will give you options for installing the product key. Since we have imported the MAK key, the option will be shown below.
Once successfully installed, you will get the following prompt
Once the key is installed, you can close the windows, and it will show you below the screen, but the new key will be ‘Unlicensed’ (as, in my case, it already indicates licensed).
Right-click on the machine row, which shows unlicensed, and click on ‘Activate.’
If machines are connected to the Internet, you can select ‘Online Activation .’ For devices not having an Internet connection, choose ‘Proxy activation.’
For Proxy activation, the machine on which VAMT is installed should be connected to the Internet.
Once you click on Activate, the below screen will appear, showing success.
If you select ‘Proxy Activation’ below window will appear, use ‘Acquire Confirmation ID, apply to selected machine(s) and activate,’ it will activate the product.
On how to install and configure the KMS key, follow the article Install a KMS Client.
Firewall Configurations for Machines Behind the Firewall
WMI firewall ports need to use VAMT activation on those machines if machines are behind the firewall.
For machines on an Isolated network, VAMT must be installed on a local device in the same network for activation.
You can follow the article to learn the firewall requirements and Configure Windows Firewall to allow VAMT.
A hardware firewall allows only a limited set of TCP/IP ports in specific scenarios. Administrators must ensure that WMI (which relies on RPC over TCP/IP) is permitted through these firewalls. By default, the WMI port is a dynamically allocated random port above 1024. The following Microsoft knowledge article discusses how administrators can limit the range of dynamically allocated ports.
Ports Requirement: VAMT Activate Windows 7 ESU keys
- TCP Ports 135 and 445 Inbound – This is needed for Windows Management Instrumentation (WMI)
- TCP 1024 – 2000 Inbound – Dynamic Ports for Windows Management Instrumentation (WMI).
- TCP 49152 – TCP 65535 – Dynamic Range RPC.
Known Issues VAMT Activate Windows 7 ESU keys
One of the most common issues you will face while adding the product key is ‘that the product key is invalid.’
To fix this, you need to
- Download the VAMT Files. The download includes the following files:
- pkconfig_win7.xrm-ms
- pkconfig_vista.xrm-ms
- Copy the two downloaded files to C:\Program Files (x86)\Windows Kits\10\Assessment and Deployment Kit\VAMT3\pkconfig, replacing the older versions of the files.
- Close VAMT, and then restart it.
For other known issues, follow the Known article Issues.
References
- https://techcommunity.microsoft.com/t5/windows-it-pro-blog/obtaining-extended-security-updates-for-eligible-windows-devices/ba-p/1167091
- https://www.microsoft.com/en-us/download/details.aspx?id=100304
- https://docs.microsoft.com/en-us/windows/deployment/volume-activation/volume-activation-management-tool
- https://www.anoopcnair.com/windows-7-extended-security-update-step-by-step/
We are on WhatsApp. To get the latest step-by-step guides and news updates, Join our Channel. Click here –HTMD WhatsApp.
Author
Ankit Shukla, an IT professional with over seven years of experience, has worked on SCCM/MECM since 2012. During this time, he has extensively dealt with various aspects of the tool, such as migration, infrastructure designing, OSD, custom SQL reporting, and client-side troubleshooting. Ankit’s blog posts reflect his hands-on experience addressing issues and providing practical solutions. The primary aim of his posts is to cater to the audience, comprised of support team members and SCCM admins in organizations.
Wrong RPC portspann should be 49152-65535, not 41952. You have a typo there.
Thank you for the note. We will fix this.
How can I make a group of devices in vamt?
Can you use the Proxy activation with a KMS server in a different domain provided firewall ports are open? We have 2 domains, with a DMZ in the middle, I want to install VAMT on the DMZ server [ports will be opened between it and the 2 domains] and use activate the KMS Client keys from Domain 2, against the KMS Server in Domain 1.