Configuring Security

Set Multiple Passwords

Use the Passwords tab of the KMS Properties dialog box to configure multiple password policies. By default, all KMS operations require only one administrator password, but you can configure certain tasks to require authorization from more than one administrator. The number of required passwords can vary, depending on the sensitivity of the task.

To configure administrator passwords:

  1. Start System Manager
    On the Start menu, point to Programs, point to Microsoft Exchange, and then click System Manager.
  2. In the console tree, click Advanced Security.
  3. In the details pane, right-click Key Manager, and then click Properties.
  4. In the Key Management Service Login dialog box, type your password, and then click OK. The default password is password.

    Note   You will have to re-type your password each time you try to perform a task or click a tab in the Key Manager Properties dialog box.

  5. In Key Management Properties, click the Passwords tab.
  6. In Add/delete administrators, edit multiple password policies, click the up arrow, or type in the number of administrators required to perform these two functions. The default is 1 and the maximum is x-1, where x is the total number of administrators.

    Note   Adding or removing KMS administrators and determining the number of passwords required to manage KMS can compromise the rest of the security functions. This value should be higher than the rest of the options on the Passwords tab.

  7. If desired, type in new values for the number of administrators required to perform each of the following tasks:

Related Topics

Administrator Passwords