24882839f3
All checks were successful
release / build-and-release (push) Successful in 22s
C:\Windows\Setup\Scripts\ does not exist on a fresh Windows install. Add New-Item -Force before Add-Content so the first log write creates the directory automatically. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
147 lines
7.8 KiB
PowerShell
147 lines
7.8 KiB
PowerShell
<#
|
|
.SYNOPSIS
|
|
Activates Windows using a product key from config or KMS GVLK fallback.
|
|
|
|
.DESCRIPTION
|
|
Checks if Windows is already activated (LicenseStatus = 1). If not, reads the
|
|
product key from config.json activation.productKey. If no key is present, selects
|
|
the appropriate GVLK for the detected Windows edition and activates via KMS.
|
|
Optionally configures a specific KMS server if activation.kmsServer is set.
|
|
|
|
.ITEMS
|
|
oa3-bios-uefi-klic-kontrola-embedded-ke: Checks for OA3 embedded product key in BIOS/UEFI firmware via SoftwareLicensingService.OA3xOriginalProductKey WMI query. If a key is found, it is installed via slmgr /ipk and activation is attempted. Most OEM machines (since Win8 OA3) have a digital entitlement key in firmware - this path handles them without requiring a key in config.json.
|
|
klic-z-config-json-activation-productkey: Reads activation.productKey from config.json. Installs via slmgr.vbs /ipk <key> and activates via slmgr.vbs /ato. Supports MAK (Multiple Activation Key) for volume licensing without KMS, and retail keys. Takes priority over GVLK fallback.
|
|
fallback-na-gvlk-kms-client-key-dle-edic: When no key is in config, detects Windows edition via (Get-WmiObject SoftwareLicensingProduct).Name and maps to Microsoft's published GVLK table. Pro: W269N-WFGWX-YVC9B-4J6C9-T83GX, Enterprise: NPPR9-FWDCX-D2C8J-H872K-2YT43, Home: TX9XD-98N7V-6WMQ6-BX7FG-H8Q99.
|
|
volitelny-kms-server-activation-kmsserve: If activation.kmsServer is in config.json, runs slmgr.vbs /skms <server>:<port> before /ato. Used for clients with on-premises KMS infrastructure (common in larger organizations with volume licensing).
|
|
preskocit-pokud-jiz-aktivovano: Queries Win32_WindowsLicenseStatus or SoftwareLicensingProduct to check LicenseStatus. Value 1 = Licensed (fully activated). Script skips activation attempt and logs "Windows already activated" to avoid unnecessary slmgr calls.
|
|
typ-klice-mak-vs-kms-vs-retail: Key type selection depends on client's Microsoft licensing: MAK = volume license key activates online against Microsoft (limited activations), KMS = requires KMS server on network (VLSC subscription), Retail = individual license from Microsoft Store or OEM.
|
|
#>
|
|
param(
|
|
[object]$Config,
|
|
[string]$LogFile
|
|
)
|
|
|
|
$ErrorActionPreference = "Continue"
|
|
|
|
function Write-Log {
|
|
param([string]$Message, [string]$Level = "INFO")
|
|
$line = "[$(Get-Date -Format 'HH:mm:ss')] [$Level] $Message"
|
|
$null = New-Item -ItemType Directory -Force -Path (Split-Path $LogFile -Parent) -ErrorAction SilentlyContinue
|
|
Add-Content -Path $LogFile -Value $line -Encoding UTF8
|
|
}
|
|
|
|
# -----------------------------------------------------------------------
|
|
# KMS Generic Volume License Keys (GVLK)
|
|
# Source: https://docs.microsoft.com/en-us/windows-server/get-started/kms-client-activation-keys
|
|
# These are official Microsoft-published keys for use with KMS infrastructure.
|
|
# Replace with your MAK/retail key for standalone activation.
|
|
# -----------------------------------------------------------------------
|
|
$KmsKeys = @{
|
|
# Windows 11
|
|
"Windows 11 Pro" = "W269N-WFGWX-YVC9B-4J6C9-T83GX"
|
|
"Windows 11 Pro N" = "MH37W-N47XK-V7XM9-C7227-GCQG9"
|
|
"Windows 11 Pro Education" = "6TP4R-GNPTD-KYYHQ-7B7DP-J447Y"
|
|
"Windows 11 Education" = "NW6C2-QMPVW-D7KKK-3GKT6-VCFB2"
|
|
"Windows 11 Enterprise" = "NPPR9-FWDCX-D2C8J-H872K-2YT43"
|
|
# Windows 10
|
|
"Windows 10 Pro" = "W269N-WFGWX-YVC9B-4J6C9-T83GX"
|
|
"Windows 10 Pro N" = "MH37W-N47XK-V7XM9-C7227-GCQG9"
|
|
"Windows 10 Education" = "NW6C2-QMPVW-D7KKK-3GKT6-VCFB2"
|
|
"Windows 10 Enterprise" = "NPPR9-FWDCX-D2C8J-H872K-2YT43"
|
|
"Windows 10 Home" = "TX9XD-98N7V-6WMQ6-BX7FG-H8Q99"
|
|
}
|
|
|
|
# -----------------------------------------------------------------------
|
|
# Check for OA3 embedded BIOS/UEFI product key
|
|
# Most OEM machines since Win8 OA3 have a product key embedded in firmware.
|
|
# -----------------------------------------------------------------------
|
|
Write-Log "Checking for OA3 embedded BIOS/UEFI product key" -Level INFO
|
|
|
|
$oa3Key = (Get-CimInstance -ClassName SoftwareLicensingService -ErrorAction SilentlyContinue).OA3xOriginalProductKey
|
|
if ($oa3Key -and $oa3Key.Trim() -ne '') {
|
|
$maskedKey = $oa3Key.Substring(0, [Math]::Min(5, $oa3Key.Length)) + "-XXXXX-XXXXX-XXXXX-XXXXX"
|
|
Write-Log " OA3 key found in firmware: $maskedKey" -Level OK
|
|
} else {
|
|
Write-Log " No OA3 key found in firmware" -Level INFO
|
|
$oa3Key = $null
|
|
}
|
|
|
|
# -----------------------------------------------------------------------
|
|
# Check current activation status
|
|
# -----------------------------------------------------------------------
|
|
Write-Log "Checking Windows activation status" -Level INFO
|
|
|
|
$licenseStatus = (Get-CimInstance SoftwareLicensingProduct -Filter "PartialProductKey IS NOT NULL AND Name LIKE 'Windows%'" -ErrorAction SilentlyContinue |
|
|
Select-Object -First 1).LicenseStatus
|
|
# LicenseStatus: 0=Unlicensed, 1=Licensed, 2=OOBGrace, 3=OOTGrace, 4=NonGenuineGrace, 5=Notification, 6=ExtendedGrace
|
|
|
|
if ($licenseStatus -eq 1) {
|
|
Write-Log " Windows is already activated - skipping" -Level OK
|
|
} else {
|
|
Write-Log " Activation status: $licenseStatus (not activated)" -Level WARN
|
|
|
|
# Detect Windows edition
|
|
$osCaption = (Get-CimInstance Win32_OperatingSystem -ErrorAction SilentlyContinue).Caption
|
|
Write-Log " Detected OS: $osCaption" -Level INFO
|
|
|
|
# Key priority: config.json > OA3 firmware > GVLK
|
|
$customKey = $null
|
|
if ($Config -and $Config.activation -and $Config.activation.productKey) {
|
|
$customKey = $Config.activation.productKey
|
|
}
|
|
|
|
if ($customKey -and $customKey -ne "XXXXX-XXXXX-XXXXX-XXXXX-XXXXX") {
|
|
# Use key from config (highest priority)
|
|
$keyToUse = $customKey
|
|
Write-Log " Using product key from config" -Level INFO
|
|
} elseif ($oa3Key) {
|
|
# Use OA3 key from firmware
|
|
$keyToUse = $oa3Key
|
|
Write-Log " Using OA3 key from firmware" -Level INFO
|
|
} else {
|
|
# Find matching GVLK key by OS name
|
|
$keyToUse = $null
|
|
foreach ($entry in $KmsKeys.GetEnumerator()) {
|
|
if ($osCaption -like "*$($entry.Key)*") {
|
|
$keyToUse = $entry.Value
|
|
Write-Log " Matched GVLK key for: $($entry.Key)" -Level INFO
|
|
break
|
|
}
|
|
}
|
|
}
|
|
|
|
if (-not $keyToUse) {
|
|
Write-Log " No matching key found for: $osCaption" -Level WARN
|
|
Write-Log " Skipping activation - set activation.productKey in config.json" -Level WARN
|
|
} else {
|
|
# Install key
|
|
Write-Log " Installing product key..." -Level INFO
|
|
$ipkResult = & cscript //nologo "$env:SystemRoot\System32\slmgr.vbs" /ipk $keyToUse 2>&1
|
|
if ($LASTEXITCODE -eq 0) {
|
|
Write-Log " Key installed" -Level OK
|
|
} else {
|
|
Write-Log " Key install result: $ipkResult" -Level WARN
|
|
}
|
|
|
|
# Set KMS server if configured
|
|
if ($Config -and $Config.activation -and $Config.activation.kmsServer) {
|
|
$kmsServer = $Config.activation.kmsServer
|
|
Write-Log " Setting KMS server: $kmsServer" -Level INFO
|
|
& cscript //nologo "$env:SystemRoot\System32\slmgr.vbs" /skms $kmsServer 2>&1 | Out-Null
|
|
}
|
|
|
|
# Attempt activation
|
|
Write-Log " Attempting activation..." -Level INFO
|
|
$atoResult = & cscript //nologo "$env:SystemRoot\System32\slmgr.vbs" /ato 2>&1
|
|
$atoOutput = $atoResult -join " "
|
|
|
|
if ($atoOutput -match "successfully" -or $atoOutput -match "uspesn") {
|
|
Write-Log " Activation successful" -Level OK
|
|
} else {
|
|
Write-Log " Activation result: $atoOutput" -Level WARN
|
|
Write-Log " Activation may require a KMS server or valid MAK key" -Level WARN
|
|
}
|
|
}
|
|
}
|
|
|
|
Write-Log "Step 8 - Activation complete" -Level OK
|