Well, buying a key (regular, not eBay) should work fine. Otherwise, Retail or MAK keys floating around on the Internet are usually stolen and thus blacklisted. Here, we focus on the Volume versions which can be activated with KMS. No need to use stolen keys.