Windows 10 Iot Enterprise Activation Guide
Windows 10 Iot Enterprise Activation Guide
Version 1.0
Contents
........................ 1
Introduction ........................................................................................................................................................................................................................... 2
What is activation? .............................................................................................................................................................................................................. 2
Activation process overview ............................................................................................................................................................................................ 3
Enabling Activation ............................................................................................................................................................................................................. 4
Product Keys ..................................................................................................................................................................................................................... 4
Finalizing the OEM Image ........................................................................................................................................................................................... 4
Activation methods............................................................................................................................................................................................................. 5
Direct connection............................................................................................................................................................................................................ 5
Internet via proxy tool .................................................................................................................................................................................................. 5
No Internet connectivity .............................................................................................................................................................................................. 5
Activation tools .................................................................................................................................................................................................................... 5
Volume Activation Management Tool 3.1 (VAMT 3.1) .................................................................................................................................... 5
Windows Software Licensing Management Tool (Slmgr.vbs) ....................................................................................................................... 6
Windows Activation UI (Slui.exe) .............................................................................................................................................................................. 6
Reactivation ........................................................................................................................................................................................................................... 6
Activate a Windows 10 IoT Enterprise device by using a direct Internet connection ......................................................................... 6
Activate a device over the Internet by using VAMT 3.1 .................................................................................................................................. 8
Activate a Windows 10 IoT Enterprise device by using a proxy connection to the Internet ......................................................... 11
Activate a Windows 10 IoT Enterprise device by using a telephone ...................................................................................................... 18
All Windows 10 IoT Enterprise devices must be enabled for activation. Device activation may be completed by having devices contact
Microsoft activation verification servers directly through an Internet connection or indirectly via a proxy tool. Alternatively, Windows
10 IoT offers a third option, allowing devices not connected to the Internet to remain in a deferred activation state, as described
further below. This option is new to Windows 10 IoT.
This guide is primarily intended as a resource for individuals required to perform this activation process; however, it is also useful as a
resource for administrators, planners, and technicians in other roles who need to understand how activation works or how to activate
a device.
What is activation?
Activation is the process of registering Windows 10 IoT Enterprise with Microsoft to ensure the product is genuine. Activation is used
to:
1. Reduce software piracy.
2. Protect the software industry, corporate intellectual property, software development investments, and product quality.
3. Ensure customers receive the product quality they expect.
By default, you must enable each device for activation. If the device is not connected to the Internet, it will remain in a deferred
activation state. If the device is connected to the Internet, the device will automatically activate over the Internet. If the device
connects to the Internet and the activation attempt fails due to an invalid licensing key or one that has exceeded its activation
allotment, it will enter a not activated state. Thus, there are three potential device states:
1. Activated state
After a device has been activated, it will remain activated unless a significant change triggers a need to reactivate the device, such as
a motherboard replacement or completely reimaging the device.
Windows 10 IoT Activation Guide 2
Activation process overview
Each device must have a valid license key to support activation, and the process of activation encompasses several distinct steps, as
follows:
Enabling Activation
The following sections describes the process for an OEM to build a device that is enabled for activation.
Product Keys
Product keys that apply to Windows 10 IoT Enterprise.
Note: This document does not address the use of this product key specifically.
1. Insert your media into the target device and boot into Windows 10 setup
2. Enter your OEM ePKEA or PKEA: XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
3. At elevated prompt, run: Sysprep /audit /reboot
4. After reboot, cancel the sysprep dialog, remove user created during setup, and make any other modifications required such
as installing OEM value add applications, drivers, etc. Once complete continue with step 5
5. Confirm Security Update KB3074679 is installed, if it is not please install it now.
6. At elevated command prompt run: Slmgr /cpky
7. Next, type: Sysprep /oobe /generalize /quit
8. Next, type: reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Setup\OOBE /v SetupDisplayedProductKey /t
REG_DWORD /d 1
9. Exit command prompt and shutdown
10. (capture and deploy if mass producing)
Activation methods
All Windows 10 IoT Enterprise images must be enabled for activation, which includes activation and deferred activation. If the device
is never connected to the Internet, it will remain in a deferred activation state. If you decide to fully activate the image, rather than
staying in deferred activation state, then the deciding factor in how and when to activate an image is usually what kind of Internet
connection your device has available and the needs and expectations of the final customer.
The first factor in deciding how to activate your Windows 10 IoT Enterprise device is to determine what type of Internet connection is
available to your device – direct Internet connection, Internet via proxy tool, or no Internet connectivity.
Direct connection
In this situation, a device has access to a public network so it can directly contact the Microsoft activation servers to complete the
activation process. The device must be able to send and receive information across TCP ports 80 and 443.
For more information about activating a device in this scenario, see Volume Activation Management Tool Technical Reference:
http://go.microsoft.com/fwlink/?LinkID=618654
No Internet connectivity
Situations in which there is no Internet connectivity include when the device has no networking capability, the factory has
no Internet connectivity, the device is connected to a private network that does not have Internet connectivity, or the device
cannot be connected (even indirectly through a proxy) to the Internet because of security considerations. In these
situations, you can use a telephone to activate your device.
For more information about activating a device in this scenario, see How to Contact a Microsoft Product Activation Center by Phone:
http://go.microsoft.com/fwlink/?LinkID=618655
Alternatively, you may choose to leave the device in deferred activation state.
Activation tools
You use the following tools in various activation scenarios.
Just manually select Volume Activation Management Tool (VAMT) to install, because it is not selected by default. If you do not have
a Microsoft SQL Server 2008 or later database available for VAMT to use, you should also select SQL Server Express 2012 to install,
because VAMT requires a connection to a SQL Server database. You can choose not to install any of the other features, because they
are not required for VAMT.
For more information about VAMT 3.1, see Volume Activation Management Tool Technical Reference:
http://go.microsoft.com/fwlink/?LinkID=618658
For more information about Slmgr, see Slmgr.vbs Options on TechNet: http://go.microsoft.com/fwlink/?LinkID=618656
Reactivation
Certain scenarios can cause a device to require to be reactivated. Any time a change is made to an activated device, the device is
classified as either in-tolerance or out-of-tolerance. In many cases, you can make minor changes to the hardware, such as adding
additional RAM or swapping out a hard drive, without requiring the device to be reactivated. Major hardware changes, such as
changing the motherboard of a device, can cause a device to be considered out-of-tolerance, which sets the device back to a not
activated state. A large number of small hardware changes made at once can also push a device to out-of-tolerance, even if the
individual changes themselves would be considered in-tolerance.
Attaching and detaching USB devices or other peripheral hardware has no effect on the tolerance state of the device.
When a Windows 10 IoT Enterprise device requires reactivation, a watermark is displayed in the lower-right corner of each attached
display, indicating that the device is not activated. In addition, you cannot change the Windows personalization settings, such as the
desktop background or the lock screen background. The device continues to work as normal, and there are no other changes in the
behavior of the device.
In most cases, you can reactivate the device in the same manner that you would activate a new device, as outlined in this guide.
Depending on the type of product key you have used, reactivating a device has different implications. For ePKEA keys, reactivating a
device can use up one of the pool of available keys, although multiple reactivations of the same device should reuse the reactivated
key, as long as the hardware of the device has not significantly changed.
Windows 10 IoT Enterprise provides the following two command line tools that you can use to manage your activation status:
▪ Slmgr.vbs – The Windows Software Licensing Management Tool lets you manage product keys and activation status.
▪ Slui.exe – This tool launches the Windows Activation UI.
Activate a device manually by using a direct Internet connection and the command line
Prerequisites:
▪ Windows 10 IoT Enterprise is installed on your device.
▪ Your device has a direct Internet connection.
Windows 10 IoT Activation Guide 6
▪ You have administrator rights on the device.
To activate:
1. On your device, open a command prompt as Administrator.
2. Navigate to the <system drive>:\Windows\System32 folder, and then type cscript slmgr.vbs /ato
3. Type cscript slmgr.vbs /dlv, and then verify that the License Status now displays Licensed.
Activate a device manually by using a direct Internet connection and Windows Activation UI
Prerequisites:
▪ Windows 10 IoT Enterprise is installed on your device.
▪ Your device has a direct Internet connection.
▪ You have administrator rights on the device.
To activate:
For more information about VAMT 3.1, please see Volume Activation Management Tool Technical Reference:
http://go.microsoft.com/fwlink/?LinkID=618656
4. When VAMT 3.1 successfully locates the device, it will display it in the center pane.
Note: You can search for the device or devices you want to activate in several different ways. For information about the other
options, see Volume Activation Management Tool Technical Reference: http://go.microsoft.com/fwlink/?LinkID=618656
5. Right-click the device in the center pane, click Update license status, and then click Alternate credential.
8. When the process has completed, click Close. VAMT 3.1 now displays the License Status value of the device as
Notification in the center pane.
9. Right-click the device in the center pane, click Activate, click Online activate, and then click Alternate credential.
11. A window displays the status of the attempts by VAMT 3.1 to activate the device over the Internet. After a few minutes,
the device will be activated. Note that the value in the License Status column has now changed to Licensed.
Activate a Windows 10 IoT Enterprise device by using a proxy connection to the Internet
If your device is (or can be) connected to a private network, but does not have direct access to the Internet, you can use a proxy
server to act as an intermediary between the device and the Internet. The proxy server functions as a bridge between the private
network and the Internet, and enables the device to communicate indirectly with the Microsoft activation servers.
The tool that enables you to use a proxy server to activate Windows 10 IoT Enterprise devices over a network is the Volume
Activation Management Tool 3.1 (VAMT 3.1). This tool is distributed for free. For more information about VAMT 3.1, please see
Volume Activation Management Tool Technical Reference: http://go.microsoft.com/fwlink/?LinkID=618656
Activate a device over a private network by using VAMT 3.1 on a proxy computer
The basic flow of this process is:
1. Connect your proxy computer, which has VAMT 3.1 installed on it and access to the Internet, to the private network that
your Windows 10 IoT Enterprise device is on.
2. Use VAMT 3.1 to discover your device and add your device information to the VAMT 3.1 host’s database.
3. The VAMT 3.1 host contacts the Microsoft activation server over the Internet and transmits the license information of the
device.
4. The Microsoft activation server returns a Confirmation ID (CID) for the device to the VAMT 3.1 host.
5. The VAMT 3.1 host applies that confirmation ID to the device. The device is now activated.
This process can be done on a device-by-device basis but is also scriptable to allow for automation or multiple-device activation.
To activate:
1. On the VAMT 3.1 host, open VAMT 3.1.
2. In left pane, expand the Products node, right-click the Windows node, and then click Discover Products.
When VAMT 3.1 successfully locates the device, it will display it in the center pane.
Note: You can search for the device or devices you want to activate in several different ways. For information about the
other options, see Volume Activation Management Tool Technical Reference:
http://go.microsoft.com/fwlink/?LinkID=618656
4. Right-click the device in the center pane, click Update license status, and then click Alternate credential.
7. When the process has completed, click Close. Note that the center pane will now have the value Notification in the
License Status column for this device.
8. Right-click the device in the center pane, click Activate, and then click Proxy Activate.
10. In the Windows Security dialog box, enter the username and password for an account with Administrator user rights on
the device and click Ok.
11. A window displays the status of the attempts by VAMT 3.1 to activate the device over the Internet. After a few minutes,
the device will be activated. Note that the value in the License Status column has now changed to Licensed.
Activate multiple devices as a batch over a private network by using VAMT 3.1
Windows 10 IoT Enterprise provides a Windows PowerShell command line interface script and two associated files that you can use to
automate mass activation tasks. This script enables you to create a scheduled task that periodically runs the activation script and
activate your devices.
The default location for these files is %systemdrive%\Windows Embedded Standard 8\Toolset\Activation. The files are:
▪ activationHelper.ps1 Windows PowerShell script file
▪ Config.xml Configuration file
▪ Config.xsd Configuration schema file
The steps taken by the activationHelper.ps1 script are:
1. Import the VAMT module into Windows PowerShell.
2. Parse the Config.xml file to get the device IP address/name information and generate a machine list.
3. Add the machines into the VAMT database by specifying the device name or IP address. This is done as a background job.
Windows 10 IoT Activation Guide 15
4. Sends the device’s license information to Microsoft AVS. This is a background job.
5. Obtains a confirmation ID from AVS for the device. This is a background job.
6. Applies the confirmation ID to the device. This is a background job.
7. Enables Unified Write Filter (UWF), if the flag is set in the configuration file.
8. Shuts down the device, if the flag is set in the configuration file.
Prerequisites:
▪ VAMT 3.1 host, which includes the following:
VAMT 3.1 is installed.
A SQL Server database is installed.
The VAMT 3.1 host has Internet access.
The VAMT 3.1 host has private network connectivity.
The Activation Script from the Standard 8 Toolkit has been copied to the VAMT 3.1 host and is correctly
configured for your environment.
Windows PowerShell 4.0 is installed.
Access to TCP ports 80 and 443.
▪ The device to be activated contains the following:
Configured WMI/PowerShell remote access.
▪ Private network connectivity.
▪ An administrator account with a password.
To activate:
Before setting up this periodic activation process, you must modify the activation script’s configuration file for your
environment. The following snippet is a sample of the Config.xml configuration script:
The settings that you use for the periodic activation process are described in the following table.
LogInfo Specifies the log level and log file location. <xs:simpleType name=”loglevelType”>
<xs:annotation>
<xs:documentation>Tospecifytheloglevel</xs:documentation>
</xs:annotation>
<xs:restriction base=”xs:string”>
<xs:enumerationvalue=”NoLog”/>
<xs:enumerationvalue=”ErrorOnly”/>
<xs:enumeration value=”Info” />
</xs:restriction>
</xs:simpleType>
Note: It is important to run the x86 version of Windows PowerShell with this script because of a VAMT 3.1 requirement. If you are
running this script on an x64 system, the default path for the x86 Windows PowerShell application is %SystemRoot%\
syswow64\WindowsPowerShell\v1.0\powershell.exe.
8. In the Add Arguments box, enter the script location using the –File parameter and the full path to the ActivationHelper.ps1
file, and then click Next.
9. On the Summary page, select the Open the properties dialog for this task when I click finish, and then click Finish.
10. In the Properties dialog box:
a. On the General tab, select the Run with highest privileges checkbox.
b. On the Conditions tab, clear the Start the task only if the computer is idle checkbox.
c. On the Conditions tab, clear the Start the task only if the computer is on AC power check box if it is selected.
11. Click Ok to complete scheduling this task.
If your device is connected to the Internet, but you still want to use telephone activation, you can use either SLMGR or the Windows
Activation UI (SLUI).
Activate a device by using a telephone
You can activate your device by using a telephone to call the Microsoft Product Activation Center. You will need to provide your
information and your 63-digit Installation ID, and you will receive a 48-digit confirmation ID from the Microsoft Product Activation
Center.
You must then use either SLMGR or SLUI to activate the device by entering the confirmation ID onto the device. Your device must be
connected to the Internet to use SLUI.
▪ Activate a Device by Using a Telephone and SLMGR.
▪ Activate a Device by Using a Telephone and SLUI.
8. Type cscript slmgr.vbs /dlv and then verify the License Status now displays Licensed.
Note: Each device must be activated separately. Batch activation is not supported.
6. To verify the licensing status, open a command prompt as Administrator on the device.
7. Navigate to the <system drive >:\Windows\System32 folder, type cscript slmgr.vbs /dlv , and then verify that the
License Status now displays Licensed.
© 2015 Microsoft Corporation. All rights reserved. This document is provided “as-is.” Information and views
expressed in this document, including URL and other Internet Web site references, may change without notice. You
bear the risk of using it.
Some examples are for illustration only and are fictitious. No real association is intended or inferred.
This document does not provide you with any legal rights to any intellectual property in any Microsoft product.
You may copy and use this document for your internal, reference purposes. This document is confidential and
proprietary to Microsoft. It is disclosed and can be used only pursuant to a non-disclosure agreement.