The Safeguard VM requires a Windows 10 LTSC (Long-Term Servicing Channel) license.
If validating via KMS
- Validate the VM can access the KMS server port on TCP/1688
- Validate the DNS server specified in the Kiosk is correct
- Validate that the KMS server has the same time as the KMS server
- Validate that the KMS server can issue licenses for Windows 10 LTSC. A KB may be needed: