XADM: How to Verify the Integrity of a Key Management Server Database

The Microsoft Exchange Key Management Server uses Extensible Storage Engine (also referred to as "ESE") database technology, which is also implemented in the Exchange Server database files.

Customers have requested the ability to verify the integrity of these various ESE-based databases, and a variety of utilities exist to perform this function. This article describes the options available for Exchange Key Management Server databases.

The Microsoft Exchange Key Management Server service includes an executable file named Kmserver.exe. When the Exchange Key Management Server service is stopped, you can supply a variety of command-line switches to Kmserver.exe, depending upon your specific need.

Validate the Integrity of the Microsoft Exchange Key Management Server Database File

1. Stop the Microsoft Exchange Key Management Service.
2. Make a backup of your Exchsrvr\Kmsdata directory.
3. Go to a command prompt.
4. Change to the Exchsrvr\Bin directory.
5. Type the following:
   "kmserver <kmserverpassword> -R" (without the quotation marks or brackets)
6. As this is running, events will be logged in the Event Viewer's application log.
   
   NOTE: Please review the application log to inspect the actions that were performed.
7. Restart the Microsoft Exchange Key Management Service.

Repair the Microsoft Exchange Key Management Server Database File

1. Stop the Microsoft Exchange Key Management Service.
2. Make a backup of your Exchsrvr\Kmsdata directory.
3. Go to a command prompt.
4. Change to the Exchsrvr\Bin directory.
5. Type the following:
   "kmserver <kmserverpassword> -RF" (without the quotation marks or brackets)
6. As this is running, events will be logged to Event Viewer's application log.
   
   NOTE: Please review the application log to inspect the actions that were performed.
7. Restart the Microsoft Exchange Key Management Service.