If he got given the CD by someone else, the other person has obviously used it, and have no need for the disk anymore. The disk is useless to another person. The key has been used once, and it cannot be used again, because it is linked with the original owner's steam account. Tell him to give the CD back.