XADM: How to Recover from a Lost Key Management Server

Article translations Article translations
Article ID: 152849 - View products that this article applies to.
This article was previously published under Q152849
This article has been archived. It is offered "as is" and will no longer be updated.
Expand all | Collapse all


If the disk that a Key Management (KM) Server password is located on is lost or damaged, and the password on the disk is unknown, the following procedure can be used to reset the KM Server password.


  1. Have the users decrypt any encrypted messages (or else they will not be able to read them once they get a new security key). They can do this manually or use the bulk security tool SECTOOL.EXE (included with the Microsoft Exchange Resource Kit) to decrypt them all at once.
  2. Run KMSERVER -u (you must use lowercase) to remove the Microsoft Exchange Key Management Service.
  3. Remove the directory where the Key Management server was installed.
  4. Reinstall the KM Server software to generate a new key for encrypted messages.


Article ID: 152849 - Last Review: September 30, 2013 - Revision: 3.3
  • Microsoft Exchange Server 4.0 Standard Edition
  • Microsoft Exchange Server 5.0 Standard Edition
kbnosurvey kbarchive kbenv kbhowto KB152849

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com