There are two aspects to KMS management: determining who has administration rights and, optionally, setting a multiple password policy. Each administrator needs a password to execute any KMS management function.
By default, an authorized KMS administrator can perform all tasks, but you have the option of requiring multiple administrators for any KMS function you choose. For example, requiring four administrators to recover keys, means that four separate administrator passwords must be entered before KMS will perform that function.
This section provides the following information: