Hacker Neue

Preferences
Wowfunhappy parent
What does this mean for using Windows in air gapped environments? I would have assumed this was common enough to make Microsoft want to support it.

Is it possible to activate via a web browser on a separate computer, similar to the flow for phone activation?

tormeh
Microsoft is the US military's biggest supplier. There is definitely a solution for this. And that solution is probably not available to regular users.
jasomill
There are several solutions, and while most are limited to volume licensing, which, depending on your definition, may exclude "regular users", at least one is not:

1. Supply the code given by the "slmgr /dti" command to Microsoft over the phone or online from a non-air gapped machine.

2. Apply the resulting activation code with the "slmgr /atp" command.

Wowfunhappy OP
The phone option just went away per TFA, which is why I was wondering if there's still an online (but on a different device) way to do this.
wolvoleo
Yeah this. The common man rules don't apply there.

Even in Enterprise by the way. No way we pay the amounts listed on the MS website.

m463
I would guess (no idea) that military computers log into the cloud, maybe it is a special (expensive) ms military cloud.
leptons
That then is explicitly not an "air gapped" computer, which there definitely is need for in the military and government.
wmf
Regular users buy a PC with Windows pre-activated.
5555624
You take it to Base Ops and they imaage it or they come to you and image it.
lostlogin (dead)
Aaron2222
As per the article:

  Now when trying to activate the OS by attempting to call the phone number for Microsoft Product Activation, an automated voice response says the following: "Support for product activation has moved online. For the fastest and most convenient way to activate your product, please visit our online product activation portal at aka.ms/aoh"
It does require logging in (to the website) with a Microsoft account, but Microsoft claims:

  By logging in with your account, it will not associate the account to the licenses.
From there, it's just a web version of phone activation (you enter your Installation ID and presumably they give you the Confirmation ID). No idea what happens when moving a licence between machines (with phone activation, the automated process would fail due to the existing activation and you'd be handed off to someone in a call center who would generate the Confirmation ID for you).
9x39
Key management services or Active Directory activation.

This is a small roadbump to home/smb free activations.

octoberfranklin
air gapped
9x39
AD and KMS work in an air gapped network just fine.
andix
I don't think regular Windows 11 is that useful in those cases. You probably either want an intranet connected Windows client, that gets activated and updated via a local server. Probably also a LTSC release, that doesn't get feature updates all the time.

Or a Windows 11 IoT image, that only enables some specific features, and is stripped down for a specific purpose.

For individual use I guess the solution is to set it up once with internet connectivity and air gap afterwards.

leptons
>For individual use I guess the solution is to set it up once with internet connectivity and air gap afterwards.

That's simply not good enough for some purposes. Once a computer is connected to the internet, at all for any amount of time, the system could be considered to be less secure.

andix
Sure, but why do you need to use Windows for such a specific setup?
leptons
Because someone somewhere wrote some software that only runs on Windows. That isn't the important detail here.
bri3d
VAMT proxy activation, or full fledged volume licensing with KMS
octoberfranklin
These acronyms are not super helpful, and just wildly guessing at what "VAMT" means it probably is nowhere near qualifying as airgapped.
bri3d
Do you have access to Google?

VAMT proxy activation is airgapped in the exact same way the “old” telephone way was; VAMT acts as the server that you used to call on the phone. It trades one token for another. You side channel the tokens across to and from the airgapped machine.

cheschire
you probably need to stand up a key management server (KMS)
octoberfranklin
That is not air gapped
bigstrat2003
The original post said "air gapped environments", not "air gapped computers". Running several computers on a network which has no connections to the outside qualifies as an air gapped environment, and will let you use a key server just fine.
cheschire
My assumption is that the system is on an air-gapped network, as individual systems that are completely isolated are typically not very useful as a full user environment, and are more likely to be fully embedded systems instead.
makeitdouble
Internal key activation can be done through a KMS host , which can be activated by phone (or some other dedicated mean if you're big enough for MS to care)

https://learn.microsoft.com/en-us/windows-server/get-started...

wvenable
Just don't activate. It's not necessary.
makeitdouble
Can't remember what, but there will be functional limitations if you don't activate, even with a verified key.
Wowfunhappy OP
If you're a home user, I agree. But if you're a business, wouldn't this be a liability?
prmoustache
Liability would be to not purchase a license, not failing to activate it.

Only risk would be to not have suppport available.

lfllfkddl
You don’t get support on non-activated software.
layer8
You rarely get useful support from Microsoft anyway.
prmoustache
That's my point. The question is which fraction of users/businesses actually ever ask for support? And as long as error can be replicated on an activated install, I guess they could still get support.

I knew a number of companies who were using a handful of RedHat servers and many more running CentOS and whenever they encountered issues on a CentOS system they would just replicate it on a RedHat one before asking for support and sending logs. Morally dubious but contractually OK.

applewizard5
I bought the darn thing, I want the full package
navigate8310
The closest solution is using IoT LTSC
andix
Last time I tried to use it for an appliance, we weren't able to buy licenses. Microsoft gave us the contact to the only reseller in our country, and they couldn't find anyone in the company who knew how to sell Windows IoT licenses.

Edit: We only wanted to buy around 20 licenses, so their motivation was also not that big to figure it out.

This item has no comments currently.

Keyboard Shortcuts

Story Lists

j
Next story
k
Previous story
Shift+j
Last story
Shift+k
First story
o Enter
Go to story URL
c
Go to comments
u
Go to author

Navigation

Shift+t
Go to top stories
Shift+n
Go to new stories
Shift+b
Go to best stories
Shift+a
Go to Ask HN
Shift+s
Go to Show HN

Miscellaneous

?
Show this modal