vlmcsd.8.html 45 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342343344345346347348349350351352353354355356357358359360361362363364365366367368369370371372373374375376377378379380381382383384385386387388389390391392393394395396397398399400401402403404405406407408409410411412413414415416417418419420421422423424425426427428429430431432433434435436437438439440441442443444445446447448449450451452453454455456457458459460461462463464465466467468469470471472473474475476477478479480481482483484485486487488489490491492493494495496497498499500501502503504505506507508509510511512513514515516517518519520521522523524525526527528529530531532533534535536537538539540541542543544545546547548549550551552553554555556557558559560561562563564565566567568569570571572573574575576577578579580581582583584585586587588589590591592593594595596597598599600601602603604605606607608609610611612613614615616617618619620621622623624625626627628629630631632633634635636637638639640641642643644645646647648649650651652653654655656657658659660661662663664665666667668669670671672673674675676677678679680681682683684685686687688689690691692693694695696697698699700701702703704705706707708709710711712713714715716717718719720721722723724725726727728729730731732733734735736737738739740741742743744745746747748749750751752753754755756757758759760761762763764765766767768769770771772773774775776777778779780781782783784785786787788789790791792793794795796797798799800801802803804805806807808809810811812813814815816817818819820821822823824825826827828829830831832833834835836837838839840841842843844845846847848849850851852853854855856857858859860861862863864865866867868869870871872873874875876877878879880881882883884885886887888889890891892893894895896897898899900901902903904905906907908909910911912913914915916917918919920921922923924925926927928929930931932933934935936937938939940941942943944945946947948949950951952953954955956957958959960961962963964965966967968969970971972973974975976977978979980981982983984985986987988989990991992993994995996997998999100010011002100310041005100610071008100910101011101210131014101510161017101810191020102110221023102410251026102710281029103010311032103310341035103610371038103910401041104210431044104510461047104810491050105110521053105410551056105710581059106010611062106310641065106610671068106910701071107210731074107510761077107810791080108110821083108410851086108710881089109010911092109310941095109610971098109911001101110211031104110511061107110811091110111111121113111411151116111711181119112011211122112311241125112611271128112911301131113211331134113511361137113811391140114111421143114411451146114711481149115011511152115311541155115611571158115911601161116211631164116511661167116811691170117111721173117411751176117711781179118011811182118311841185118611871188118911901191119211931194119511961197
  1. <!-- Creator : groff version 1.22.3 -->
  2. <!-- CreationDate: Sat Jun 17 00:53:29 2017 -->
  3. <!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
  4. "http://www.w3.org/TR/html4/loose.dtd">
  5. <html>
  6. <head>
  7. <meta name="generator" content="groff -Thtml, see www.gnu.org">
  8. <meta http-equiv="Content-Type" content="text/html; charset=US-ASCII">
  9. <meta name="Content-Style" content="text/css">
  10. <style type="text/css">
  11. p { margin-top: 0; margin-bottom: 0; vertical-align: top }
  12. pre { margin-top: 0; margin-bottom: 0; vertical-align: top }
  13. table { margin-top: 0; margin-bottom: 0; vertical-align: top }
  14. h1 { text-align: center }
  15. </style>
  16. <title>VLMCSD</title>
  17. </head>
  18. <body>
  19. <h1 align="center">VLMCSD</h1>
  20. <a href="#NAME">NAME</a><br>
  21. <a href="#SYNOPSIS">SYNOPSIS</a><br>
  22. <a href="#DESCRIPTION">DESCRIPTION</a><br>
  23. <a href="#OPTIONS">OPTIONS</a><br>
  24. <a href="#SIGNALS">SIGNALS</a><br>
  25. <a href="#SUPPORTED OPERATING SYSTEMS">SUPPORTED OPERATING SYSTEMS</a><br>
  26. <a href="#SUPPORTED PRODUCTS">SUPPORTED PRODUCTS</a><br>
  27. <a href="#FILES">FILES</a><br>
  28. <a href="#EXAMPLES">EXAMPLES</a><br>
  29. <a href="#BUGS">BUGS</a><br>
  30. <a href="#AUTHOR">AUTHOR</a><br>
  31. <a href="#CREDITS">CREDITS</a><br>
  32. <a href="#SEE ALSO">SEE ALSO</a><br>
  33. <hr>
  34. <h2>NAME
  35. <a name="NAME"></a>
  36. </h2>
  37. <p style="margin-left:11%; margin-top: 1em">vlmcsd - a
  38. fully Microsoft compatible KMS server</p>
  39. <h2>SYNOPSIS
  40. <a name="SYNOPSIS"></a>
  41. </h2>
  42. <p style="margin-left:11%; margin-top: 1em"><b>vlmcsd</b> [
  43. <i>options</i> ]</p>
  44. <h2>DESCRIPTION
  45. <a name="DESCRIPTION"></a>
  46. </h2>
  47. <p style="margin-left:11%; margin-top: 1em"><b>vlmcsd</b>
  48. is a fully Microsoft compatible KMS server that provides
  49. product activation services to clients. It is meant as a
  50. drop-in replacement for a Microsoft KMS server (Windows
  51. computer with KMS key entered). It currently supports KMS
  52. protocol versions 4, 5 and 6.</p>
  53. <p style="margin-left:11%; margin-top: 1em"><b>vlmcsd</b>
  54. is designed to run on POSIX compatible operating systens. It
  55. only requires a basic C library with a BSD-style sockets API
  56. and either <b>fork</b>(2) or <b>pthreads</b>(7). That allows
  57. it to run on most embedded systems like routers, NASes,
  58. mobile phones, tablets, TVs, settop boxes, etc. Some efforts
  59. have been made that it also runs on Windows.</p>
  60. <p style="margin-left:11%; margin-top: 1em">Although
  61. <b>vlmcsd</b> does neither require an activation key nor a
  62. payment to anyone, it is not meant to run illegal copies of
  63. Windows. Its purpose is to ensure that owners of legal
  64. copies can use their software without restrictions, e.g. if
  65. you buy a new computer or motherboard and your key will be
  66. refused activation from Microsoft servers due to hardware
  67. changes.</p>
  68. <p style="margin-left:11%; margin-top: 1em"><b>vlmcsd</b>
  69. may be started via an internet superserver like
  70. <b>inetd</b>(8) or <b>xinetd</b>(8) as well as an advanced
  71. init system like <b>systemd</b>(8) or <b>launchd</b>(8)
  72. using socket based activation. If <b>vlmcsd</b> detects that
  73. <b>stdin</b>(3) is a socket, it assumes that there is
  74. already a connected client on stdin that wants to be
  75. activated.</p>
  76. <p style="margin-left:11%; margin-top: 1em">All options
  77. that control setting up listening sockets will be ignored
  78. when in inetd mode. The sockets will be set up by your
  79. internet superserver. You also cannot limit the number of
  80. simultanous clients (option <b>-m</b>). You need to
  81. configure the limit in your internet superserver.</p>
  82. <p style="margin-left:11%; margin-top: 1em">The followong
  83. features that require that vlmcsd is permanently loaded will
  84. not work if started from an internet superserver:</p>
  85. <p style="margin-left:22%; margin-top: 1em">You cannot
  86. maintain a client list (option <b>-M1</b>)</p>
  87. <p style="margin-left:22%; margin-top: 1em">EPID
  88. Randomization Level 1 (option <b>-r1</b>) works like Level 2
  89. (<b>-r2</b>). You may want to use Level 0 (<b>-r0</b>) or
  90. custom EPIDs (options <b>-w</b>, <b>-G</b>, <b>-0</b>,
  91. <b>-3</b> and <b>-6</b>) instead.</p>
  92. <h2>OPTIONS
  93. <a name="OPTIONS"></a>
  94. </h2>
  95. <p style="margin-left:11%; margin-top: 1em">Since vlmcsd
  96. can be configured at compile time, some options may not be
  97. available on your system.</p>
  98. <p style="margin-left:11%; margin-top: 1em">All options
  99. that do no require an argument may be combined with a single
  100. dash, for instance &quot;vlmcsd -D -e&quot; is identical to
  101. &quot;vlmcsd -De&quot;. For all options that require an
  102. argument a space between the option and the option argument
  103. is optional. Thus &quot;vlmcsd -r 2&quot; and &quot;vlmcsd
  104. -r2&quot; are identical too. <b><br>
  105. -h</b> or <b>-?</b></p>
  106. <p style="margin-left:22%;">Displays help.</p>
  107. <table width="100%" border="0" rules="none" frame="void"
  108. cellspacing="0" cellpadding="0">
  109. <tr valign="top" align="left">
  110. <td width="11%"></td>
  111. <td width="3%">
  112. <p><b>-V</b></p></td>
  113. <td width="8%"></td>
  114. <td width="78%">
  115. <p>Displays extended version information. This includes the
  116. compiler used to build vlmcsd, the intended platform and
  117. flags (compile time options) to build vlmcsd. If you have
  118. the source code of vlmcsd, you can type <b>make help</b> (or
  119. <b>gmake help</b> on systems that do not use the GNU version
  120. of <b>make</b>(1) by default) to see the meaning of those
  121. flags.</p> </td></tr>
  122. </table>
  123. <p style="margin-left:11%;"><b>-L</b>
  124. <i>ipaddress</i>[:<i>port</i>]</p>
  125. <p style="margin-left:22%;">Instructs vlmcsd to listen on
  126. <i>ipaddress</i> with optional <i>port</i> (default 1688).
  127. You can use this option more than once. If you do not
  128. specify <b>-L</b> at least once, IP addresses 0.0.0.0 (IPv4)
  129. and :: (IPv6) are used. If the IP address contains colons
  130. (IPv6) you must enclose the IP address in brackets if you
  131. specify the optional port, e.g.
  132. [2001:db8::dead:beef]:1688.</p>
  133. <p style="margin-left:22%; margin-top: 1em">If no port is
  134. specified, vlmcsd uses the default port according to a
  135. preceding <b>-P</b> option. If you specify a port, it can be
  136. a number (1-65535) or a name (usually found in /etc/services
  137. if not provided via LDAP, NIS+ or another name service).</p>
  138. <p style="margin-left:22%; margin-top: 1em">If you specify
  139. a link local IPv6 address (fe80::/10, usually starting with
  140. fe80::), it must be followed by a percent sign (%) and a
  141. scope id (=network interface name or number) on most unixoid
  142. OSses including Linux, Android, MacOS X and iOS, e.g.
  143. fe80::1234:56ff:fe78:9abc<b>%eth0</b> or
  144. [fe80::1234:56ff:fe78:9abc<b>%2</b>]:1688. Windows
  145. (including cygwin) does not require a scope id unless the
  146. same link local address is used on more than one network
  147. interface. Windows does not accept a name and the scope id
  148. must be a number.</p>
  149. <p style="margin-left:11%;"><b>-o</b> <i>level</i></p>
  150. <p style="margin-left:22%;">Sets the <i>level</i> of
  151. protection against activations from public IP addresses. The
  152. default is <b>-o0</b> for no protection.</p>
  153. <p style="margin-left:22%; margin-top: 1em"><b>-o1</b>
  154. causes vlmcsd not to listen on all IP addresses but on
  155. private IP addresses only. IPv4 addresses in the
  156. 100.64.0.0/10 range (see RFC6598) are not treated as private
  157. since they can be reached from other users of your ISP.
  158. Private IPv4 addresses are 10.0.0.0/8, 172.16.0.0/12,
  159. 192.168.0.0/16, 169.254.0.0/16 and 127.0.0.0/8. vlmcsd
  160. treats all IPv6 addresses not within 2000::/3 as private
  161. addresses.</p>
  162. <p style="margin-left:22%; margin-top: 1em">If <b>-o1</b>
  163. is combined with <b>-L</b>, it will listen on all private IP
  164. addresses plus the ones specified by one or more <b>-L</b>
  165. statements. If <b>-o1</b> is combined with <b>-P</b>, only
  166. the last <b>-P</b> statement will be used.</p>
  167. <p style="margin-left:22%; margin-top: 1em">Using
  168. <b>-o1</b> does not protect you if you enable NAT port
  169. forwarding on your router to your vlmcsd machine. It is
  170. identical to using multiple -L statements with all of your
  171. private IP addresses. What <b>-o1</b> does for you, is
  172. automatically enumerating your private IP addresses.</p>
  173. <p style="margin-left:22%; margin-top: 1em"><b>-o2</b> does
  174. not affect the interfaces, vlmcsd is listening on. When a
  175. clients connects, vlmcsd immediately drops the connection if
  176. the client has a public IP address. Unlike <b>-o1</b>
  177. clients will be able to establish a TCP connection but it
  178. will be closed without a single byte sent over the
  179. connection. This protects against clients with public IP
  180. addresses even if NAT port forwarding is used. While
  181. <b>-o2</b> offers a higher level of protection than
  182. <b>-o1</b>, the client sees that the KMS TCP port (1688 by
  183. default) is actually accepting connections.</p>
  184. <p style="margin-left:22%; margin-top: 1em">If vlmcsd is
  185. compiled to use MS RPC, <b>-o2</b> can only offer very poor
  186. protection. Control is passed from MS RPC to vlmcsd after
  187. the KMS protocol has already been negotiated. Thus a client
  188. can always verify that the KMS protocol is available even
  189. though it receives an RPC_S_ACCESS_DENIED error message.
  190. vlmcsd will issue a warning if <b>-o2</b> is used with MS
  191. RPC. <b>For adaequate protection do not use a MS RPC build
  192. of vlmcsd with -o2</b>.</p>
  193. <p style="margin-left:22%; margin-top: 1em"><b>-o3</b>
  194. combines <b>-o1</b> and <b>-o2</b>. vlmcsd listens on
  195. private interfaces only and if a public client manages to
  196. connect anyway due to NAT port forwarding, it will be
  197. immediately dropped.</p>
  198. <p style="margin-left:22%; margin-top: 1em">If you use any
  199. form of TCP level port forwarding (e.g. <b>nc</b>(1),
  200. <b>netcat</b>(1), <b>ssh</b>(1) port forwarding or similar)
  201. to redirect KMS requests to vlmcsd, there will be no
  202. protection even if you use <b>-o2</b> or <b>-o3</b>. This is
  203. due to the simple fact that vlmcsd sees the IP address of
  204. the redirector and not the IP address of the client.</p>
  205. <p style="margin-left:22%; margin-top: 1em"><b>-o1</b> (and
  206. thus <b>-o3</b>) is not (yet) available in some
  207. scenarios:</p>
  208. <p style="margin-left:29%; margin-top: 1em">FreeBSD: There
  209. is a longtime unfixed
  210. <a href="https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=178881">bug</a>
  211. in the 32-bit ABI of the 64-bit kernel. If you have a 64-bit
  212. FreeBSD kernel, you must run the 64-bit version of vlmcsd if
  213. you use <b>-o1</b> or <b>-o3</b>. The 32-bit version causes
  214. undefined behavior up to crashing vlmcsd. Other BSDs
  215. (NetBSD, OpenBSD, Dragonfly and Mac OS X) work
  216. correctly.</p>
  217. <p style="margin-left:29%; margin-top: 1em">If vlmcsd was
  218. started by an internet superserver or was compiled to use
  219. Microsoft RPC (Windows only) or simple sockets, <b>-o1</b>
  220. and <b>-o3</b> are not available by design.</p>
  221. <p style="margin-left:11%;"><b>-P</b> <i>port</i></p>
  222. <p style="margin-left:22%;">Use TCP <i>port</i> for all
  223. subsequent <b>-L</b> statements that do not include an
  224. optional port. If you use <b>-P</b> and <b>-L</b>, <b>-P</b>
  225. must be specified before <b>-L</b>.</p>
  226. <p style="margin-left:11%;"><b>-O</b>
  227. <i>vpn-adapter-name</i>[=<i>ipv4-address</i>][/<i>cidr-mask</i>][:<i>dhcp-lease-duration</i>]</p>
  228. <p style="margin-left:22%;">Enables a compatible VPN
  229. adapter to create additional local IPv4 addresses (like
  230. 127.0.0.1) that appear as remote IPv4 addresses to the
  231. system. This allows product activation using a local
  232. instance of vlmcsd. This feature is only available in
  233. Windows and Cygwin builds of vlmcsd since it is not of any
  234. use on other operating systems. Compatible VPN adapters are
  235. Tap-windows version 8.2 or higher (from OpenVPN) and the
  236. TeamViewer VPN adapter. There are two special
  237. <i>vpn-adapter-name</i>s. A single period (.) instructs
  238. vlmcsd to use the first available compatible VPN adapter. A
  239. single dash (-) disables the use of a VPN adapter if one has
  240. been configured in <b>vlmcsd.ini</b>(5). The
  241. <i>vpn-adapter-name</i> is <b>not</b> case-sensitive. If the
  242. <i>vpn-adapter-name</i> contains spaces (e.g. Ethernet 3),
  243. you must enclose it in quotes.</p>
  244. <p style="margin-left:22%; margin-top: 1em">The default
  245. <i>ipv4-address</i> is 10.10.10.9 and the default
  246. <i>cidr-mask</i> is 30. If you are using the default values,
  247. your VPN adapter uses an IPv4 address of 10.10.10.9 and you
  248. can set your activation client to use the easy to remember
  249. address 10.10.10.10 (e.g. slmgr /skms 10.10.10.10 or cscript
  250. ospp.vbs /sethst:10.10.10.10).</p>
  251. <p style="margin-left:22%; margin-top: 1em">The
  252. <i>dhcp-lease-duration</i> is a number optionally followed
  253. by s, m, h, d or w to indicate seconds, minutes, hours, days
  254. or weeks. The default <i>dhcp-lease-duration</i> is 1d (one
  255. day). It is normally not required to change this value.</p>
  256. <p style="margin-left:22%; margin-top: 1em">It is advised
  257. not to manually configure your OpenVPN TAP or TeamViewer VPN
  258. adapter in &quot;Network Connections&quot;. If you set the
  259. IPv4 configuration manually anyway, the IPv4 address and the
  260. subnet mask must match the <b>-O</b> parameter. It is safe
  261. leave the IPv4 configuration to automatic (DHCP). vlmcsd
  262. will wait up to four seconds for the DHCP configuration to
  263. complete before binding to and listenin on any
  264. interfaces.</p>
  265. <p style="margin-left:22%; margin-top: 1em">You should be
  266. aware that only one program can use a VPN adapter at a time.
  267. If you use the TeamViewer VPN adapter for example, you will
  268. not be able to use the VPN feature of TeamViewer as long as
  269. vlmcsd is running. The same applies to OpenVPN TAP adapters
  270. that are in use by other programs (for example OpenVPN,
  271. QEMU, Ratiborus VM, aiccu, etc.). The best way to avoid
  272. conflicts is to install Tap-Windows from OpenVPN, cd to
  273. C:\Program Files\TAP-Windows\bin and run addtap.bat to
  274. install an additional TAP adapter. Go to &quot;Network
  275. Connections&quot; and rename the new adapter to
  276. &quot;vlmcsd&quot; and specify <b>-O vlmcsd</b> to use
  277. it.</p>
  278. <p style="margin-left:22%; margin-top: 1em">Example: <b>-O
  279. &quot;Ethernet 7&quot;=192.168.123.1/24</b> (uses VPN
  280. adapter Ethernet 7 with IPv4 address 192.168.123.1 and have
  281. 192.168.123.2 to 192.168.123.254 as additional local (but
  282. apparently remote) IPv4 addresses.</p>
  283. <p style="margin-left:11%;"><b>-x0</b> and <b>-x1</b></p>
  284. <p style="margin-left:22%;">Controls under what
  285. circumstances vlmcsd will exit. Using the default of
  286. <b>-x0</b> vlmcsd stays active as long as it can perform
  287. some useful operations. If vlmcsd is run by any form of a
  288. watchdog, e.g. NT service manager (Windows), systemd (Linux)
  289. or launchd (Mac OS / iOS), it may be desirable to end vlmcsd
  290. and let the watchdog restart it. This is especially true if
  291. some pre-requisites are not yet met but will be some time
  292. later, e.g. network is not yet fully setup.</p>
  293. <p style="margin-left:22%; margin-top: 1em">By using
  294. <b>-x0</b> vlmcsd will</p>
  295. <p style="margin-left:29%; margin-top: 1em">exit if none of
  296. the listening sockets specified with <b>-L</b> can be used.
  297. It continues if at least one socket can be setup for
  298. listening.</p>
  299. <p style="margin-left:29%; margin-top: 1em">exit any TAP
  300. mirror thread (Windows version only) if there is an error
  301. condition while reading or writing from or to the VPN
  302. adapter but continue to work without utilizing a VPN
  303. adapter.</p>
  304. <p style="margin-left:22%; margin-top: 1em">By using
  305. <b>-x1</b> vlmcsd will</p>
  306. <p style="margin-left:29%; margin-top: 1em">exit if not all
  307. listening sockets specified with <b>-L</b> can be used.</p>
  308. <p style="margin-left:29%; margin-top: 1em">exit completely
  309. if there is a problem with a VPN adapter it is using. This
  310. can happen for instance if the VPN adapter has been disabled
  311. using &quot;Control Panel - Network - Adapter Settings&quot;
  312. while vlmcsd is using it.</p>
  313. <p style="margin-left:22%; margin-top: 1em">Please note
  314. that <b>-x1</b> is kind of a workaround option. While it may
  315. help under some circumstances, it is better to solve the
  316. problem at its origin, e.g. properly implementing
  317. dependencies in your startup script to ensure all network
  318. interfaces and the VPN adapter you will use are completely
  319. setup before you start vlmcsd.</p>
  320. <p style="margin-left:11%;"><b>-F0</b> and <b>-F1</b></p>
  321. <p style="margin-left:22%;">Allow (<b>-F1</b>) or disallow
  322. (<b>-F0</b>) binding to IP addresses that are currently not
  323. configured on your system. The default is <b>-F0</b>.
  324. <b>-F1</b> allows you to bind to an IP address that may be
  325. configured after you started <b>vlmcsd</b>. <b>vlmcsd</b>
  326. will listen on that address as soon as it becomes available.
  327. This feature is only available under Linux (IPv4 and IPv6)
  328. and FreeBSD (IPv4 only). FreeBSD allows this feature only
  329. for the root user (more correctly: processes that have the
  330. PRIV_NETINET_BINDANY privilege). Linux does not require a
  331. capability for this.</p>
  332. <p style="margin-left:11%;"><b>-t</b> <i>seconds</i></p>
  333. <p style="margin-left:22%;">Timeout the TCP connection with
  334. the client after <i>seconds</i> seconds. After sending an
  335. activation request. RPC keeps the TCP connection for a
  336. while. The default is 30 seconds. You may specify a shorter
  337. period to free ressources on your device faster. This is
  338. useful for devices with limited main memory or if you used
  339. <b>-m</b> to limit the concurrent clients that may request
  340. activation. Microsoft RPC clients disconnect after 30
  341. seconds by default. Setting <i>seconds</i> to a greater
  342. value does not make much sense.</p>
  343. <p style="margin-left:11%;"><b>-m</b>
  344. <i>concurrent-clients</i></p>
  345. <p style="margin-left:22%;">Limit the number of clients
  346. that will be handled concurrently. This is useful for
  347. devices with limited ressources or if you are experiencing
  348. DoS attacks that spawn thousands of threads or forked
  349. processes. If additional clients connect to vlmcsd, they
  350. need to wait until another client disconnects. If you set
  351. <i>concurrent-clients</i> to a small value ( &lt;10 ), you
  352. should also select a reasonable timeout of 2 or 3 seconds
  353. with <b>-t</b>. The default is no limit.</p>
  354. <table width="100%" border="0" rules="none" frame="void"
  355. cellspacing="0" cellpadding="0">
  356. <tr valign="top" align="left">
  357. <td width="11%"></td>
  358. <td width="3%">
  359. <p><b>-d</b></p></td>
  360. <td width="8%"></td>
  361. <td width="78%">
  362. <p>Disconnect each client after processing one activation
  363. request. This is a direct violation of DCE RPC but may help
  364. if you receive malicous fake RPC requests that block your
  365. threads or forked processes. Some other KMS emulators (e.g.
  366. py-kms) behave this way.</p></td></tr>
  367. <tr valign="top" align="left">
  368. <td width="11%"></td>
  369. <td width="3%">
  370. <p><b>-k</b></p></td>
  371. <td width="8%"></td>
  372. <td width="78%">
  373. <p>Do not disconnect clients after processing an activation
  374. request. This selects the default behavior. <b>-k</b> is
  375. useful only if you used an ini file (see
  376. <b>vlmcsd.ini</b>(5) and <b>-i</b>). If the ini file
  377. contains the line &quot;DisconnectClientsImmediately =
  378. true&quot;, you can use this switch to restore the default
  379. behavior.</p> </td></tr>
  380. </table>
  381. <p style="margin-left:11%;"><b>-N0</b> and <b>-N1</b></p>
  382. <p style="margin-left:22%;">Disables (<b>-N0</b>) or
  383. enables (<b>-N1</b>) the use of the NDR64 transfer syntax in
  384. the RPC protocol. Unlike Microsoft vlmcsd supports NDR64 on
  385. 32-bit operating systems. Microsoft introduced NDR64 in
  386. Windows Vista but their KMS servers started using it with
  387. Windows 8. Thus if you choose random ePIDs, vlmcsd will
  388. select ePIDs with build numbers 9200 and 9600 if you enable
  389. NDR64 and build numbers 6002 and 7601 if you disable NDR64.
  390. The default is to enable NDR64.</p>
  391. <p style="margin-left:11%;"><b>-B0</b> and <b>-B1</b></p>
  392. <p style="margin-left:22%;">Disables (<b>-B0</b>) or
  393. enables (<b>-B1</b>) bind time feature negotiation (BTFN) in
  394. the RPC protocol. All Windows operating systems starting
  395. with Vista support BTFN and try to negotiate it when
  396. initiating an RPC connection. Thus consider turning it off
  397. as a debug / troubleshooting feature only. Some older
  398. firewalls that selectively block or redirect RPC traffic may
  399. get confused when they detect NDR64 or BTFN.</p>
  400. <p style="margin-left:11%;"><b>-l</b> <i>filename</i></p>
  401. <p style="margin-left:22%;">Use <i>filename</i> as a log
  402. file. The log file records all activations with IP address,
  403. Windows workstation name (no reverse DNS lookup), activated
  404. product, KMS protocol, time and date. If you do not specify
  405. a log file, no log is created. For a live view of the log
  406. file type tail -f <i>file</i>.</p>
  407. <p style="margin-left:22%; margin-top: 1em">If you use the
  408. special <i>filename</i> &quot;syslog&quot;, vlmcsd uses
  409. <b>syslog</b>(3) for logging. If your system has no syslog
  410. service (/dev/log) installed, logging output will go to
  411. /dev/console. Syslog logging is not available in the native
  412. Windows version. The Cygwin version does support syslog
  413. logging.</p>
  414. <p style="margin-left:11%;"><b>-T0</b> and <b>-T1</b></p>
  415. <p style="margin-left:22%;">Disable (<b>-T0</b>) or enable
  416. (<b>-T1</b>) the inclusion of date and time in each line of
  417. the log. The default is <b>-T1</b>. <b>-T0</b> is useful if
  418. you log to <b>stdout</b>(3) which is redirected to another
  419. logging mechanism that already includes date and time in its
  420. output, for instance <b>systemd-journald</b>(8). If you log
  421. to <b>syslog</b>(3), <b>-T1</b> is ignored and date and time
  422. will never be included in the output sent to
  423. <b>syslog</b>(3).</p>
  424. <table width="100%" border="0" rules="none" frame="void"
  425. cellspacing="0" cellpadding="0">
  426. <tr valign="top" align="left">
  427. <td width="11%"></td>
  428. <td width="3%">
  429. <p><b>-D</b></p></td>
  430. <td width="8%"></td>
  431. <td width="78%">
  432. <p>Normally vlmcsd daemonizes and runs in background
  433. (except the native Windows version). If <b>-D</b> is
  434. specified, vlmcsd does not daemonize and runs in foreground.
  435. This is useful for testing and allows you to simply press
  436. &lt;Ctrl-C&gt; to exit vlmcsd.</p></td></tr>
  437. </table>
  438. <p style="margin-left:22%; margin-top: 1em">The native
  439. Windows version never daemonizes and always behaves as if
  440. <b>-D</b> had been specified. You may want to install vlmcsd
  441. as a service instead. See <b>-s</b>.</p>
  442. <table width="100%" border="0" rules="none" frame="void"
  443. cellspacing="0" cellpadding="0">
  444. <tr valign="top" align="left">
  445. <td width="11%"></td>
  446. <td width="3%">
  447. <p style="margin-top: 1em"><b>-e</b></p></td>
  448. <td width="8%"></td>
  449. <td width="78%">
  450. <p style="margin-top: 1em">If specified, vlmcsd ignores
  451. <b>-l</b> and writes all logging output to <b>stdout</b>(3).
  452. This is mainly useful for testing and debugging and often
  453. combined with <b>-D</b>.</p></td></tr>
  454. <tr valign="top" align="left">
  455. <td width="11%"></td>
  456. <td width="3%">
  457. <p><b>-v</b></p></td>
  458. <td width="8%"></td>
  459. <td width="78%">
  460. <p>Use verbose logging. Logs every parameter of the base
  461. request and the base response. It also logs the HWID of the
  462. KMS server if KMS protocol version 6 is used. This option is
  463. mainly for debugging purposes. It only has an effect if some
  464. form of logging is used. Thus <b>-v</b> does not make sense
  465. if not used with <b>-l</b>, <b>-e</b> or <b>-f</b>.</p></td></tr>
  466. <tr valign="top" align="left">
  467. <td width="11%"></td>
  468. <td width="3%">
  469. <p><b>-q</b></p></td>
  470. <td width="8%"></td>
  471. <td width="78%">
  472. <p>Do not use verbose logging. This is actually the default
  473. behavior. It only makes sense if you use vlmcsd with an ini
  474. file (see <b>-i</b> and <b>vlmcsd.ini</b>(5)). If the ini
  475. file contains the line &quot;LogVerbose = true&quot; you can
  476. use <b>-q</b> to restore the default behavior.</p></td></tr>
  477. </table>
  478. <p style="margin-left:11%;"><b>-p</b> <i>filename</i></p>
  479. <p style="margin-left:22%;">Create pid file
  480. <i>filename</i>. This has nothing to do with KMS ePIDs. A
  481. pid file is a file where vlmcsd writes its own process id.
  482. This is used by standard init scripts (typically found in
  483. /etc/init.d). The default is not to write a pid file.</p>
  484. <p style="margin-left:11%;"><b>-u</b> <i>user</i> and
  485. <b>-g</b> <i>group</i></p>
  486. <p style="margin-left:22%;">Causes vlmcsd to run in the
  487. specified <i>user</i> and <i>group</i> security context. The
  488. main purpose for this is to drop root privileges after it
  489. has been started from the root account. To use this feature
  490. from cygwin you must run cyglsa-config and the account from
  491. which vlmcsd is started must have the rights &quot;Act as
  492. part of the operating system&quot; and &quot;Replace a
  493. process level token&quot;. The native Windows version does
  494. not support these options.</p>
  495. <p style="margin-left:22%; margin-top: 1em">The actual
  496. security context switch is performed after the TCP sockets
  497. have been created. This allows you to use privileged ports
  498. (&lt; 1024) when you start vlmcsd from the root account.</p>
  499. <p style="margin-left:22%; margin-top: 1em">However if you
  500. use an ini, pid or log file, you must ensure that the
  501. unprivileged user has access to these files. You can always
  502. log to <b>syslog</b>(3) from an unprivileged account on most
  503. platforms (see <b>-l</b>).</p>
  504. <p style="margin-left:11%;"><b>-w</b> <i>ePID</i></p>
  505. <p style="margin-left:22%;">Use <i>ePID</i> as Windows
  506. ePID. If specified, <b>-r</b> is disregarded for
  507. Windows.</p>
  508. <p style="margin-left:11%;"><b>-0</b> <i>ePID</i></p>
  509. <p style="margin-left:22%;">Use <i>ePID</i> as Office 2010
  510. ePID (including Project and Visio). If specified, <b>-r</b>
  511. is disregarded for Office 2010.</p>
  512. <p style="margin-left:11%;"><b>-3</b> <i>ePID</i></p>
  513. <p style="margin-left:22%;">Use <i>ePID</i> as Office 2013
  514. ePID (including Project and Visio). If specified, <b>-r</b>
  515. is disregarded for Office 2013.</p>
  516. <p style="margin-left:11%;"><b>-6</b> <i>ePID</i></p>
  517. <p style="margin-left:22%;">Use <i>ePID</i> as Office 2016
  518. ePID (including Project and Visio). If specified, <b>-r</b>
  519. is disregarded for Office 2016.</p>
  520. <p style="margin-left:11%;"><b>-G</b> <i>ePID</i></p>
  521. <p style="margin-left:22%;">Use <i>ePID</i> as Windows
  522. China Government ePID. If specified, <b>-r</b> is
  523. disregarded for Windows China Government Editions
  524. (Enterprise G/GN).</p>
  525. <p style="margin-left:11%;"><b>-H</b> <i>HwId</i></p>
  526. <p style="margin-left:22%;">Use <i>HwId</i> for all
  527. products. All HWIDs in the ini file (see <b>-i</b>) will not
  528. be used. In an ini file you can specify a seperate HWID for
  529. each <i>application-guid</i>. This is not possible when
  530. entering a HWID from the command line.</p>
  531. <p style="margin-left:22%; margin-top: 1em"><i>HwId</i>
  532. must be specified as 16 hex digits that are interpreted as a
  533. series of 8 bytes (big endian). Any character that is not a
  534. hex digit will be ignored. This is for better readability.
  535. The following commands are identical:</p>
  536. <p style="margin-left:22%; margin-top: 1em">vlmcsd -H
  537. 0123456789ABCDEF <br>
  538. vlmcsd -H 01:23:45:67:89:ab:cd:ef <br>
  539. vlmcsd -H &quot;01 23 45 67 89 AB CD EF&quot;</p>
  540. <p style="margin-left:11%;"><b>-i</b> <i>filename</i></p>
  541. <p style="margin-left:22%;">Use configuration file (aka ini
  542. file) <i>filename</i>. Most configuration parameters can be
  543. set either via the command line or an ini file. The command
  544. line always has precedence over configuration items in the
  545. ini file. See <b>vlmcsd.ini</b>(5) for the format of the
  546. configuration file.</p>
  547. <p style="margin-left:22%; margin-top: 1em">If vlmcsd has
  548. been compiled to use a default configuration file (often
  549. /etc/vlmcsd.ini), you may use <b>-i-</b> to ignore the
  550. default configuration file.</p>
  551. <p style="margin-left:11%;"><b>-j</b> <i>filename</i></p>
  552. <p style="margin-left:22%;">Use KMS data file
  553. <i>filename</i>. By default vlmcsd only contains the minimum
  554. product data that is required to perform all operations
  555. correctly. You may use a more complete KMS data file that
  556. contains all detailed product names. This is especially
  557. useful if you are logging KMS requests. If you don&rsquo;t
  558. log, there is no need to load an external KMS data file.</p>
  559. <p style="margin-left:22%; margin-top: 1em">If vlmcsd has
  560. been compiled to use a default KMS data file, you may use
  561. <b>-j-</b> to ignore the default configuration file.</p>
  562. <p style="margin-left:11%;"><b>-r0</b>, <b>-r1</b>
  563. (default) and <b>-r2</b></p>
  564. <p style="margin-left:22%;">These options determine how
  565. ePIDs are generated if</p>
  566. <p style="margin-left:22%; margin-top: 1em">- you did not
  567. sprecify an ePID in the command line and <br>
  568. - you haven&rsquo;t used <b>-i</b> or <br>
  569. - the file specified by <b>-i</b> cannot be opened or <br>
  570. - the file specified by <b>-i</b> does not contain an ePID
  571. for the KMS request</p>
  572. <p style="margin-left:22%; margin-top: 1em"><b>-r0</b>
  573. means there are no random ePIDs. vlmcsd simply issues
  574. default ePIDs that are built into the binary at compile
  575. time. <b>Pro:</b> behaves like real KMS server that also
  576. always issues the same ePID. <b>Con:</b> Microsoft may start
  577. blacklisting again and the default ePID may not work any
  578. longer.</p>
  579. <p style="margin-left:22%; margin-top: 1em"><b>-r1</b>
  580. instructs vlmcsd to generate random ePIDs when the program
  581. starts or receives a SIGHUP signal and uses these ePIDs
  582. until it is stopped or receives another SIGHUP. Most other
  583. KMS emulators generate a new ePID on every KMS request. This
  584. is easily detectable. Microsoft could just modify sppsvc.exe
  585. in a way that it always sends two identical KMS requests in
  586. two RPC requests but over the same TCP connection. If both
  587. KMS responses contain the different ePIDs, the KMS server is
  588. not genuine. <b>-r1</b> is the default mode. <b>-r1</b> also
  589. ensures that all three ePIDs (Windows, Office 2010 and
  590. Office 2013) use the same OS build number and LCID (language
  591. id).</p>
  592. <p style="margin-left:22%; margin-top: 1em">If vlmcsd has
  593. been started by an internet superserver, <b>-r1</b> works
  594. almost identically to <b>-r2</b>. The only exception occurs
  595. if you send more than one activation request over the same
  596. TCP connection. This is simply due to the fact that vlmcsd
  597. is started upon a connection request and does not stay in
  598. memory after servicing a KMS request. Consider using
  599. <b>-r0</b> or <b>-w</b>, <b>-G</b>, <b>-0</b>, <b>-3</b> and
  600. <b>-6</b> when starting vlmcsd by an internet
  601. superserver.</p>
  602. <p style="margin-left:22%; margin-top: 1em"><b>-r2</b>
  603. behaves like most other KMS server emulators with random
  604. support and generates a new random ePID on every request.
  605. <b>-r2</b> should be treated as debugging option only
  606. because it allows very easy emulator detection.</p>
  607. <p style="margin-left:11%;"><b>-C</b> <i>LCID</i></p>
  608. <p style="margin-left:22%;">Do not randomize the locale id
  609. part of the ePID and use <i>LCID</i> instead. The
  610. <i>LCID</i> must be specified as a decimal number, e.g. 1049
  611. for &quot;Russian - Russia&quot;. This option has no effect
  612. if the ePID is not randomized at all, e.g. if it is selected
  613. from the command line or an ini file.</p>
  614. <p style="margin-left:22%; margin-top: 1em">By default
  615. vlmcsd generates a valid locale id that is recognized by
  616. .NET Framework 4.0. This may lead to a locale id which is
  617. unlikely to occur in your country, for instance 2155 for
  618. &quot;Quecha - Ecuador&quot;. You may want to select the
  619. locale id of your country instead. See
  620. <a href="http://msdn.microsoft.com/en-us/goglobal/bb964664.aspx">MSDN</a>
  621. for a list of valid <i>LCID</i>s. Please note that some of
  622. them are not recognized by .NET Framework 4.0.</p>
  623. <p style="margin-left:22%; margin-top: 1em">Most other KMS
  624. emulators use a fixed <i>LCID</i> of 1033 (English - US). To
  625. achive the same behavior in vlmcsd use <b>-C 1033</b>.</p>
  626. <p style="margin-left:11%;"><b>-K0</b>, <b>-K1</b>,
  627. <b>-K2</b> and <b>-K3</b></p>
  628. <p style="margin-left:22%;">Sets the whitelisting level to
  629. determine which products vlmcsd activates or refuses. The
  630. default is <b>-K0</b>.</p>
  631. <p style="margin-left:29%; margin-top: 1em"><b>-K0</b>:
  632. activate all products with an unknown, retail or
  633. beta/preview KMS ID. <b><br>
  634. -K1</b>: activate products with a retail or beta/preview KMS
  635. ID but refuse to activate products with an unknown KMS ID.
  636. <b><br>
  637. -K2</b>: activate products with an unknown KMS ID but refuse
  638. products with a retail or beta/preview KMS ID. <b><br>
  639. -K3</b>: activate only products with a known volume license
  640. RTM KMS ID and refuse all others.</p>
  641. <table width="100%" border="0" rules="none" frame="void"
  642. cellspacing="0" cellpadding="0">
  643. <tr valign="top" align="left">
  644. <td width="22%"></td>
  645. <td width="78%">
  646. <p>The SKU ID is not checked. Like a genuine KMS server
  647. vlmcsd activates a product that has a random or unknown SKU
  648. ID. If you select <b>-K1</b> or <b>-K3</b>, vlmcsd also
  649. checks the Application ID for correctness. If Microsoft
  650. introduces a new KMS ID for a new product, you cannot
  651. activate it if you used <b>-K1</b> or <b>-K3</b> until a new
  652. version of vlmcsd is available.</p></td></tr>
  653. </table>
  654. <p style="margin-left:11%;"><b>-c0</b> and <b>-c1</b></p>
  655. <p style="margin-left:22%;"><b>-c1</b> causes vlmcsd to
  656. check if the client time differs no more than four hours
  657. from the system time. <b>-c0</b> (the default) disables this
  658. check. <b>-c1</b> is useful to prevent emulator detection. A
  659. client that tries to detect an emulator could simply send
  660. two subsequent request with two time stamps that differ more
  661. than four hours from each other. If both requests succeed,
  662. the server is an emulator. If you specify <b>-c1</b> on a
  663. system with no reliable time source, activations will fail.
  664. It is ok to set the correct system time after you started
  665. vlmcsd.</p>
  666. <p style="margin-left:11%;"><b>-M0</b> and <b>-M1</b></p>
  667. <p style="margin-left:22%;">Disables (<b>-M0</b>) or
  668. enables (<b>-M1</b>) maintaining a list of client machine
  669. IDs (CMIDs). The default is <b>-M0</b>. <b>-M1</b> is useful
  670. to prevent emulator detection. By maintaing a CMID list,
  671. vlmcsd reports current active clients exactly like a genuine
  672. KMS emulator. This includes bug compatibility to the extent
  673. that you can permanently kill a genuine KMS emulator by
  674. sending an &quot;overcharge request&quot; with a required
  675. client count of 376 or more and then request activation for
  676. 671 clients. vlmcsd can be reset from this condition by
  677. restarting it. If <b>-M0</b> is used, vlmcsd reports current
  678. active clients as good as possible. If no client sends an
  679. &quot;overcharge request&quot;, it is not possible to detect
  680. vlmcsd as an emulator with <b>-M0</b>. <b>-M1</b> requires
  681. the allocation of a buffer that is about 50 kB in size. On
  682. hardware with few memory resources use it only if you really
  683. need it.</p>
  684. <p style="margin-left:22%; margin-top: 1em">If you start
  685. vlmcsd from an internet superserver, <b>-M1</b> cannot be
  686. used. Since vlmcsd exits after each activation, it cannot
  687. maintain any state in memory.</p>
  688. <p style="margin-left:11%;"><b>-E0</b> and <b>-E1</b></p>
  689. <p style="margin-left:22%;">These options are ignored if
  690. you do not also specify <b>-M1</b>. If you use <b>-E0</b>
  691. (the default), vlmcsd starts up as a fully
  692. &quot;charged&quot; KMS server. Clients activate
  693. immediately. <b>-E1</b> lets you start up vlmcsd with an
  694. empty CMID list. Activation will start when the required
  695. minimum clients (25 for Windows Client OSses, 5 for Windows
  696. Server OSses and Office) have registered with the KMS
  697. server. As long as the minimum client count has not been
  698. reached, clients end up in HRESULT 0xC004F038 &quot;The
  699. count reported by your Key Management Service (KMS) is
  700. insufficient. Please contact your system
  701. administrator&quot;. You may use <b>vlmcs</b>(1) or another
  702. KMS client emulator to &quot;charge&quot; vlmcsd. <b>-E1</b>
  703. does not improve emulator detection prevention. It&rsquo;s
  704. primary purpose is to help developers of KMS clients to test
  705. &quot;charging&quot; a KMS server.</p>
  706. <p style="margin-left:11%;"><b>-R</b>
  707. <i>renewal-interval</i></p>
  708. <p style="margin-left:22%;">Instructs clients to renew
  709. activation every <i>renewal-interval</i>. The
  710. <i>renewal-interval</i> is a number optionally immediately
  711. followed by a letter indicating the unit. Valid unit letters
  712. are s (seconds), m (minutes), h (hours), d (days) and w
  713. (weeks). If you do not specify a letter, minutes is
  714. assumed.</p>
  715. <p style="margin-left:22%; margin-top: 1em"><b>-R3d</b> for
  716. instance instructs clients to renew activation every 3 days.
  717. The default <i>renewal-interval</i> is 10080 (identical to
  718. 7d and 1w).</p>
  719. <p style="margin-left:22%; margin-top: 1em">Due to poor
  720. implementation of Microsofts KMS Client it cannot be
  721. guaranteed that activation is renewed on time as specfied by
  722. the -R option. Don&rsquo;t care about that. Renewal will
  723. happen well before your activation expires (usually 180
  724. days).</p>
  725. <p style="margin-left:22%; margin-top: 1em">Even though you
  726. can specify seconds, the granularity of this option is 1
  727. minute. Seconds are rounded down to the next multiple of
  728. 60.</p>
  729. <p style="margin-left:11%;"><b>-A</b>
  730. <i>activation-interval</i></p>
  731. <p style="margin-left:22%;">Instructs clients to retry
  732. activation every <i>activation-interval</i> if it was
  733. unsuccessful, e.g. because it could not reach the server.
  734. The default is 120 (identical to 2h).
  735. <i>activation-interval</i> follows the same syntax as
  736. <i>renewal-interval</i> in the <b>-R</b> option.</p>
  737. <table width="100%" border="0" rules="none" frame="void"
  738. cellspacing="0" cellpadding="0">
  739. <tr valign="top" align="left">
  740. <td width="11%"></td>
  741. <td width="3%">
  742. <p><b>-s</b></p></td>
  743. <td width="8%"></td>
  744. <td width="78%">
  745. <p>Installs vlmcsd as a Windows service. This option only
  746. works with the native Windows version and Cygwin. Combine
  747. <b>-s</b> with other command line options. These will be in
  748. effect when you start the service. The service automatically
  749. starts when you reboot your machine. To start it manually,
  750. type &quot;net start vlmcsd&quot;.</p></td></tr>
  751. </table>
  752. <p style="margin-left:22%; margin-top: 1em">If you use
  753. Cygwin, you must include your Cygwin system DLL directory
  754. (usually C:\Cygwin\bin or C:\Cygwin64\bin) into the PATH
  755. environment variable or the service will not start.</p>
  756. <p style="margin-left:22%; margin-top: 1em">You can
  757. reinstall the service anytime using vlmcsd -s again, e.g.
  758. with a different command line. If the service is running, it
  759. will be restarted with the new command line.</p>
  760. <p style="margin-left:22%; margin-top: 1em">When using
  761. <b>-s</b> the command line is checked for basic syntax
  762. errors only. For example &quot;vlmcsd -s -L 1.2.3.4&quot;
  763. reports no error but the service will not start if 1.2.3.4
  764. is not an IP address on your system.</p>
  765. <table width="100%" border="0" rules="none" frame="void"
  766. cellspacing="0" cellpadding="0">
  767. <tr valign="top" align="left">
  768. <td width="11%"></td>
  769. <td width="3%">
  770. <p style="margin-top: 1em"><b>-S</b></p></td>
  771. <td width="8%"></td>
  772. <td width="78%">
  773. <p style="margin-top: 1em">Uninstalls the vlmcsd service.
  774. Works only with the native Windows version and Cygwin. All
  775. other options will be ignored if you include -S in the
  776. command line.</p></td></tr>
  777. </table>
  778. <p style="margin-left:11%;"><b>-U</b>
  779. [<i>domain</i>\]<i>username</i></p>
  780. <p style="margin-left:22%;">Can only be used together with
  781. <b>-s</b>. Starts the service as a different user than the
  782. local SYSTEM account. This is used to run the service under
  783. an account with low privileges. If you omit the domain, an
  784. account from the local computer will be used.</p>
  785. <p style="margin-left:22%; margin-top: 1em">You may use
  786. &quot;NT AUTHORITY\NetworkService&quot;. This is a pseudo
  787. user with low privileges. You may also use &quot;NT
  788. AUTHORITY\LocalService&quot; which has more privileges but
  789. these are of no use for running vlmcsd.</p>
  790. <p style="margin-left:22%; margin-top: 1em">Make sure that
  791. the user you specify has at least execute permission for
  792. your executable. &quot;NT AUTHORITY\NetworkService&quot;
  793. normally has no permission to run binaries from your home
  794. directory.</p>
  795. <p style="margin-left:22%; margin-top: 1em">For your
  796. convenience you can use the special username &quot;/l&quot;
  797. as a shortcut for &quot;NT AUTHORITY\LocalService&quot; and
  798. &quot;/n&quot; for &quot;NT AUTHORITY\NetworkService&quot;.
  799. &quot;vlmcsd&nbsp;-s&nbsp;-U&nbsp;/n&quot; installs the
  800. service to run as &quot;NT
  801. AUTHORITY\NetworkService&quot;.</p>
  802. <p style="margin-left:11%;"><b>-W</b> <i>password</i></p>
  803. <p style="margin-left:22%;">Can only be used together with
  804. <b>-s</b>. Specifies a <i>password</i> for the corresponding
  805. username you use with -U. SYSTEM, &quot;NT
  806. AUTHORITY\NetworkService&quot;, &quot;NT
  807. AUTHORITY\LocalService&quot; do not require a password.</p>
  808. <p style="margin-left:22%; margin-top: 1em">If you specify
  809. a user with even lower privileges than &quot;NT
  810. AUTHORITY\NetworkService&quot;, you must specify its
  811. password. You also have to grant the &quot;Log on as a
  812. service&quot; right to that user.</p>
  813. <h2>SIGNALS
  814. <a name="SIGNALS"></a>
  815. </h2>
  816. <p style="margin-left:11%; margin-top: 1em">The following
  817. signals differ from the default behavior: <b><br>
  818. SIGTERM</b>, <b>SIGINT</b></p>
  819. <p style="margin-left:22%;">These signals cause vlmcsd to
  820. exit gracefully. All global semaphores and shared memory
  821. pages will be released, the pid file will be unlinked
  822. (deleted) and a shutdown message will be logged.</p>
  823. <table width="100%" border="0" rules="none" frame="void"
  824. cellspacing="0" cellpadding="0">
  825. <tr valign="top" align="left">
  826. <td width="11%"></td>
  827. <td width="9%">
  828. <p><b>SIGHUP</b></p></td>
  829. <td width="2%"></td>
  830. <td width="78%">
  831. <p>Causes vlmcsd to be restarted completely. This is useful
  832. if you started vlmcsd with an ini file. You can modify the
  833. ini file while vlmcsd is running and then sending
  834. <b>SIGHUP</b>, e.g. by typing &quot;killall -SIGHUP
  835. vlmcsd&quot; or &quot;kill -SIGHUP &rsquo;cat
  836. /var/run/vlmcsd.pid&rsquo;&quot;.</p> </td></tr>
  837. </table>
  838. <p style="margin-left:22%; margin-top: 1em">The SIGHUP
  839. handler has been implemented relatively simple. It is
  840. virtually the same as stopping vlmcsd and starting it again
  841. immediately with the following exceptions:</p>
  842. <table width="100%" border="0" rules="none" frame="void"
  843. cellspacing="0" cellpadding="0">
  844. <tr valign="top" align="left">
  845. <td width="22%"></td>
  846. <td width="1%">
  847. <p style="margin-top: 1em">&mdash;</p></td>
  848. <td width="3%"></td>
  849. <td width="74%">
  850. <p style="margin-top: 1em">The new process does not get a
  851. new process id.</p></td></tr>
  852. <tr valign="top" align="left">
  853. <td width="22%"></td>
  854. <td width="1%">
  855. <p>&mdash;</p></td>
  856. <td width="3%"></td>
  857. <td width="74%">
  858. <p>If you used a pid file, it is not deleted and recreated
  859. because the process id stays the same.</p></td></tr>
  860. <tr valign="top" align="left">
  861. <td width="22%"></td>
  862. <td width="1%">
  863. <p>&mdash;</p></td>
  864. <td width="3%"></td>
  865. <td width="74%">
  866. <p>If you used the &rsquo;user&rsquo; and/or
  867. &rsquo;group&rsquo; directive in an ini file these are
  868. ignored. This is because once you switched to lower
  869. privileged users and groups, there is no way back. Anything
  870. else would be a severe security flaw in the OS.</p></td></tr>
  871. </table>
  872. <p style="margin-left:11%; margin-top: 1em">Signaling is
  873. not available in the native Windows version and in the
  874. Cygwin version when vlmcsd runs as a Windows service.</p>
  875. <h2>SUPPORTED OPERATING SYSTEMS
  876. <a name="SUPPORTED OPERATING SYSTEMS"></a>
  877. </h2>
  878. <p style="margin-left:11%; margin-top: 1em"><b>vlmcsd</b>
  879. compiles and runs on Linux, Windows (no Cygwin required but
  880. explicitly supported), Mac OS X, FreeBSD, NetBSD, OpenBSD,
  881. Dragonfly BSD, Minix, Solaris, OpenIndiana, Android and iOS.
  882. Other POSIX or unixoid OSses may work with unmodified
  883. sources or may require minor porting efforts.</p>
  884. <h2>SUPPORTED PRODUCTS
  885. <a name="SUPPORTED PRODUCTS"></a>
  886. </h2>
  887. <p style="margin-left:11%; margin-top: 1em"><b>vlmcsd</b>
  888. can answer activation requests for the following products:
  889. Windows Vista, Windows 7, Windows 8, Windows 8.1, Windows 10
  890. (up to 1703), Windows Server 2008, Windows Server 2008 R2,
  891. Windows Server 2012, Windows Server 2012 R2, Windows Server
  892. 2016, Office 2010, Project 2010, Visio 2010, Office 2013,
  893. Project 2013, Visio 2013, Office 2016, Project 2016, Visio
  894. 2016. Newer products may work as long as the KMS protocol
  895. does not change. A complete list of fully supported products
  896. can be obtained using the <b>-x</b> option of
  897. <b>vlmcs</b>(1).</p>
  898. <p style="margin-left:11%; margin-top: 1em">Office, Project
  899. and Visio must be volume license versions.</p>
  900. <h2>FILES
  901. <a name="FILES"></a>
  902. </h2>
  903. <p style="margin-left:11%; margin-top: 1em"><b>vlmcsd.ini</b>(5)</p>
  904. <h2>EXAMPLES
  905. <a name="EXAMPLES"></a>
  906. </h2>
  907. <p style="margin-left:11%; margin-top: 1em"><b>vlmcsd
  908. -De</b></p>
  909. <p style="margin-left:22%;">Starts <b>vlmcsd</b> in
  910. foreground. Useful if you use it for the first time and want
  911. to see what&rsquo;s happening when a client requests
  912. activation.</p>
  913. <p style="margin-left:11%;"><b>vlmcsd -l
  914. /var/log/vlmcsd.log</b></p>
  915. <p style="margin-left:22%;">Starts <b>vlmcsd</b> as a
  916. daemon and logs everything to /var/log/vlmcsd.log.</p>
  917. <p style="margin-left:11%;"><b>vlmcsd -L
  918. 192.168.1.17</b></p>
  919. <p style="margin-left:22%;">Starts <b>vlmcsd</b> as a
  920. daemon and listens on IP address 192.168.1.17 only. This is
  921. useful for routers that have a public and a private IP
  922. address to prevent your KMS server from becoming public.</p>
  923. <p style="margin-left:11%;"><b>vlmcsd -s -U /n -l
  924. C:\logs\vlmcsd.log</b></p>
  925. <p style="margin-left:22%;">Installs <b>vlmcsd</b> as a
  926. Windows service with low privileges and logs everything to
  927. C:\logs\vlmcsd.log when the service is started with
  928. &quot;net start vlmcsd&quot;.</p>
  929. <h2>BUGS
  930. <a name="BUGS"></a>
  931. </h2>
  932. <p style="margin-left:11%; margin-top: 1em">An ePID
  933. specified in an ini file must not contain spaces.</p>
  934. <h2>AUTHOR
  935. <a name="AUTHOR"></a>
  936. </h2>
  937. <p style="margin-left:11%; margin-top: 1em">Written by
  938. crony12, Hotbird64 and vityan666. With contributions from
  939. DougQaid.</p>
  940. <h2>CREDITS
  941. <a name="CREDITS"></a>
  942. </h2>
  943. <p style="margin-left:11%; margin-top: 1em">Thanks to
  944. CODYQX4, deagles, eIcn, mikmik38, nosferati87, qad,
  945. Ratiborus, ...</p>
  946. <h2>SEE ALSO
  947. <a name="SEE ALSO"></a>
  948. </h2>
  949. <p style="margin-left:11%; margin-top: 1em"><b>vlmcsd.ini</b>(5),
  950. <b>vlmcsd</b>(7), <b>vlmcs</b>(1), <b>vlmcsdmulti</b>(1)</p>
  951. <hr>
  952. </body>
  953. </html>