Not advocating for illegal acquisition of the game here : but since the master server is now gone, there is nothing to enforce genuine cdkeys are used with your game.
If you can't find your cdkey, but you are certain you do infact own the game legally, then you could just use any cdkey.
This post is certainly going to get flamed, but im just saying, that legally as long as you are a genuine owner of the game, they (insert official party here), will probably not take action against you. eg: they are not going to waste time on legal action against someone who might actually be a genuine owner of the game, especially given the amount of money legal action takes, in comparison to the money they would be making by forcing someone to buy another copy.
Bioware also having the expectation of people buying a new copy, to get a new cdkey, just because they arbitrarily decided to retract access to cdkeys on their old site doesn't work in their favor, regardless of their reason for doing so.
(If memory serves, our personal details were stolen anyway... so turning the site off, didn't benefit us in any way? Infact, I'd be inclined to believe that the 3 dozen junk emails I get a day asking me if i want to buy aphrodisiac's from online pharmacy's is in part due to my personal details being stolen from Bioware, Sony and who knows where else. So turning off access to their website didn't protect my data, after it had already been stolen, if anything it just prevented me from accessing the data I was storing with Bioware for safe keeping.)
In short- the cdkeys no longer moderate online gameplay, and are only needed to get past the install screens.
Its highly opinion based, but I would say if you can morally say that you actually do own the game (and if you were to hunt hard enough, might be able to find proof?), but just cant find your cdkeys to hand right now - do what morally feels right to you.
If it feels a little too dodgy, feel free to fork out more cash on more cdkeys.
I happen to belong to that group of people who have installations of nwn that just gets copied from hdd to hdd, so I never actually need my nwncdkey for install screens any more, but I'd say on a moral level, if I had to reinstall, but couldn't find my cdkeys, I'd be more inclined to use a random cdkey from the web than purchase another one for the sake of passing an install screen - this is just out of a sense of principle, that I personally believe it is wrong for bioware to force people to buy something twice due to something that they themselves were negligent to prevent. (the security breech)
< This is where people start telling me that it costs $9.00 on GOG, and look at me in disbelief that I would rather perform a dodgy action than purchase something twice. Really not interested in how cheap the game is, I just object out of principle to buying something twice >
(If you bought a cinema ticket, but lost the ticket, but had the receipt: the cinema staff will generally not expect you to buy another ticket because the proof of purchase shows that you already have a ticket....
Would you buy another ticket? or use the proof of purchase?)
The Bioware website had a section for storing CDKeys, (specifically for storing CDKeys), I don't think its an unreasonable expectation that the CDKeys should be assumed to be safe, and accessible, and certainly not swiped away without notice by the people storing them.
(Its like me offering my website for people to store data in, and then I randomly say one day "HEY...I have turned the site off, your no longer allowed to access that data". The reason behind it is meaningless, the action itself is somewhat illegal - Mediafire/RapidShare and co - they're users won court cases to get access to the data on the servers which was genuine non-copyright infringing content.
Bioware not allowing access to our own content/information is infringing on data protection laws. I believe legally, you can actually complete a form, and make a request to Bioware to get any personal details they hold about you... this would have to extend to CDKeys also - I may be incorrect on this, but I seem to remember hearing that you can legally demand/request to see any personal data that a company has on you, and they are only legally allowed to keep it for 2 years after you stop using their service etc)
http://ico.org.uk/fo...o_personal_data