After we upgraded the client's internal PKI, their Key Management Service host — which activates volume-licensed Windows and Office across the network — was still on Windows Server 2012, heading for end of support in October 2023.
What I did
Retired the 2012 host: removed its host key and its DNS SRV record.
Stood up the Windows Server 2022 host and activated it with Microsoft.
Verified that clients found the new host through DNS and that its activation count climbed.