XADM: How to Recover from a Lost Key Management Server

This article was previously published under Q152849
This article has been archived. It is offered "as is" and will no longer be updated.
If the disk that a Key Management (KM) Server password is located on islost or damaged, and the password on the disk is unknown, the followingprocedure can be used to reset the KM Server password.
  1. Have the users decrypt any encrypted messages (or else they will not be able to read them once they get a new security key). They can do this manually or use the bulk security tool SECTOOL.EXE (included with the Microsoft Exchange Resource Kit) to decrypt them all at once.
  2. Run KMSERVER -u (you must use lowercase) to remove the MicrosoftExchange Key Management Service.
  3. Remove the directory where the Key Management server was installed.
  4. Reinstall the KM Server software to generate a new key for encrypted messages.

Article ID: 152849 - Last Review: 09/30/2013 22:24:29 - Revision: 3.3

Microsoft Exchange Server 4.0 Standard Edition, Microsoft Exchange Server 5.0 Standard Edition

  • kbnosurvey kbarchive kbenv kbhowto KB152849