# TSforge Activation ## Overview - How to use it? Please find the instructions [here](intro.md#download--how-to-use-it). - This activation is permanent until a Windows reinstall or a major feature upgrade (not to be confused with small enablement upgrades or monthly cumulative updates). - This activation method doesn't modify any Windows components and doesn't install any new files. - Once the system is activated, hardware can be changed arbitrarily without triggering de-activation. - Internet is not required for this method. - This activation method can activate any of the following products if a phone license is available and licensing is managed by the system's SPP. For example, * Windows 7 and later * Windows Server 2008 R2 and later * Office 2013 and later (requires Windows 8 or later) * Windows addons (ESU, APPXLOB, etc.) * Windows and Office KMS Hosts (CSVLK) - Online validation (WAT) is bypassed on Windows 7. - In addition to the permanent activation of Windows and Office KMS Hosts, it also charges the KMS server with 25 clients (required for KMS client activation) for 30 days (maximum). - In addition to activation, it can reset the rearm count and evaluation period, clear the tamper state, and remove the evaluation key lock. ------------------------------------------------------------------------ ## How does it work? **Process on Windows 7** ![](/img/win7_color.svg) **Process on Windows 8 and later** ![](/img/winmodern_color.svg) - Windows activation is managed by a subsystem called the Software Protection Platform (SPP). - SPP stores information about the activation state in files called the "physical store" and "token store". - The physical store's contents are cryptographically protected and integrity-checked by SPPSvc/SPSys, preventing users from easily modifying it. - The physical store is usually found at these locations: - Windows 7 - `C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0` and `C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0` - Windows 8 - `C:\Windows\System32\spp\store\data.dat` - Windows 8.1/10/11 - `C:\Windows\System32\spp\store\2.0\data.dat` - The token store is usually found at these locations: - Windows 7 - `C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat` - Windows 8 - `C:\Windows\System32\spp\store\tokens.dat` - Windows 8.1/10/11 - `C:\Windows\System32\spp\store\2.0\tokens.dat` - In normal product key installation and phone activation, associated data is written to the physical store and token store. Said phone activation data is [cryptographically checked](https://github.com/UMSKT/writeups/blob/main/PKEY2005.md) against the Installation ID before being written. When SPP relaunches, it is only given a very basic check against the current Hardware ID. - By writing forged data directly to the physical store and token store, we can bypass both checks, causing SPP to believe it installed a fake product key and/or confirmation ID. - To bypass checks for hardware changes, a [Hardware ID](https://github.com/massgravel/activation/blob/main/Hwid.md#hardware-id) with a threshold of 0 is included in this forged data. - On Windows 7, the fake product key data does not contain a value known as the "Key Unique ID". This value is required for both WAT and online activation, so removing it causes both to be non-functional, preventing WAT from triggering de-activation. - The presence of valid product key and confirmation ID data causes SPP to activate the specified product as long as it is capable of phone activation. - This process is implemented as the ZeroCID option in [TSforge](https://github.com/massgravel/TSforge). ------------------------------------------------------------------------ ## Supported Products This activation method can activate any of the following products if a phone license is available and licensing is managed by the system's SPP. - **Windows** - Windows 7 - Windows 8 - Windows 8.1 - Windows 10 - Windows 11 - **Windows Server** - Windows Server 2008 R2 - Windows Server 2012 - Windows Server 2012 R2 - Windows Server 2016 - Windows Server 2019 - Windows Server 2022 - Windows Server 2025 - **Microsoft Office** (Requires Windows 8 or later) (Also supports UWP version of Office) - Office 2013 - Office 2016 - Office 2019 - Office 2021 - Office 2024 - **Windows Addons** - **Commercial Extended Security Updates (ESU)** - **Windows 7** (Enterprise, Professional, Ultimate and their E/N variants) - **Windows 7 Embedded POSReady7** (Embedded) - **Windows 7 Embedded Standard** (Embedded) - **Windows Server 2008 R2** (ServerDatacenter, ServerStandard, ServerEnterprise and their V/Core/VCore variants) - **Windows Server 2012** (ServerDatacenter, ServerStandard and their Core variants) - **Windows 8.1** (Enterprise, Professional, EmbeddedIndustry and their E/N variants) - **Windows Server 2012 R2** (ServerDatacenter, ServerStandard and their Core variants) - **Windows 10** (Education, Enterprise, IoTEnterprise, Professional, ProfessionalEducation, ProfessionalWorkstation and their N variants) - **8/8.1 APPXLOB** - Client - Embedded Industry - Embedded Standard - Server 2012 - **Others** (Can be selected from the manual option) - OCUR - **KMS Hosts** (CSVLK) - Windows 7 and later - Windows Server 2008 R2 and later - Office 2010 and later :::info - All architectures (x86, x64 and arm64) are supported. - For Windows, the script's key preference is: OEM_DM > OEM_COA_SLP > OEM_COA_NSLP > MAK > RETAIL - For Office, the script's key preference is: OEM_COA_NSLP > MAK > RETAIL ::: ------------------------------------------------------------------------ ## Unsupported Products This activation method does not work if a phone license is not available or if licensing is not managed by the system's SPP. - **Windows Vista / Server 2008** - You can use these [alternative options](unsupported_products_activation.md#windows-vista) to activate. - **Office on Windows 7** - Its licensing is based on OSPP, not SPP. - You can use Online KMS option in MAS to activate it. - **Office 2010** - Its licensing is based on OSPP, not SPP. - You can use Online KMS option in MAS to activate it. - **Office 365** - Phone activation license is not available. TSforge option will install Mondo 2016 license (feature-wise equivalent to 365) instead to activate Office. - You can use Ohook option in MAS to activate it. - **Windows Evaluation editions** (Windows 8 / Server 2012 and later) - Permanent activation license is not available. TSforge option will reset the evaluation period instead. - **Windows Evaluation editions** (Windows 7 / Server 2008 R2) - WLMS service protects the SPPSVC service and prevents it from stopping. Although permanent activation license is available, its officially not supported. - **Server Azure Datacenter (ServerTurbine) edition** - It does not support activation on non-azure systems. - **Windows 10 Consumer ESU (1 Year)** - Its licensing is based on CLIP, not SPP. - You can activate commercial ESU for 3 years on Pro and higher level editions with TSforge. :::info **Windows Vista:** Unlike Windows 7, Vista SPSys constantly holds an exclusive handle to the physical store, preventing user-mode programs from writing to it. This has prevented us from adding support for it. **OSPP based Office:** Physical store is stored in the registry in a format that has not yet been reverse engineered. ::: ------------------------------------------------------------------------ ## ZeroCID / KMS4k / AVMA4k - TSforge is included in MAS and it also has its own [standalone release](https://github.com/massgravel/TSforge). - TSforge includes the ZeroCID / KMS4k / AVMA4k activation methods. - KMS4k and AVMA4k are proof-of-concept methods with limitations, so we do not recommend using them. - MAS uses the ZeroCID method only and does not include KMS4k or AVMA4k, as ZeroCID can already activate all available products permanently. | Methods | Info | |---------|------------------------------------------------------------------------------------------------------| | ZeroCID | Offline permanent activation / until reinstall/feature upgrade | | KMS4k | Offline KMS activation for over 4000 years / until reinstall/feature upgrade | | AVMA4k | Offline AVMA activation for over 4000 years (Server 2012 R2+ only) / until reinstall/feature upgrade | ------------------------------------------------------------------------ ## Windows ESU - Microsoft offers paid [Extended Security Updates](https://learn.microsoft.com/lifecycle/faq/extended-security-updates) (ESU) for several Windows versions after their product lifecycle ends. - You can activate the Windows ESU / Premium Assurance license using the TSforge option in MAS. | Windows Version | Supported Editions List | ESU Period | Minimum Required Updates | |------------------------------|---------------------------------------------------------------------------------------------------------------------------------------------------|--------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------| | Windows 7 | Enterprise, Professional, Ultimate
and their E/N variants | [3 Years](https://learn.microsoft.com/en-us/lifecycle/products/windows-7)
Jan 2020 to Jan 2023

4-6 Years ESU is not officially supported,
but you can manually install Server 2008 R2 x64 updates until Jan 2026 | Windows 7 SP1
+
KB4490628 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/03/windows6.1-kb4490628-x64_d3de52d6987f7c8bdc2c015dca69eac96047c76e.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/03/windows6.1-kb4490628-x86_3cdb3df55b9cd7ef7fcb24fc4e237ea287ad0992.msu)
KB4474419-v3 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/09/windows6.1-kb4474419-v3-x64_b5614c6cea5cb4e198717789633dca16308ef79c.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2019/09/windows6.1-kb4474419-v3-x86_0f687d50402790f340087c576886501b3223bec6.msu)
**Reboot**
KB5039339 [x64](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2024/06/windows6.1-kb5039339-x64_f62846508976a6e5325ab1dca0783f9b3a60a564.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2024/06/windows6.1-kb5039339-x86_fa942048bba2a167242451236f9daf00940588aa.msu)
KB4575903 [x64](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2020/07/windows6.1-kb4575903-x64_b4d5cf045a03034201ff108c2802fa6ac79459a1.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2020/07/windows6.1-kb4575903-x86_5905c774f806205b5d25b04523bb716e1966306d.msu)
KB3138612 [x64](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/updt/2016/02/windows6.1-kb3138612-x64_f7b1de8ea7cf8faf57b0138c4068d2e899e2b266.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/updt/2016/02/windows6.1-kb3138612-x86_6e90531daffc13bc4e92ecea890e501e807c621f.msu)
KB5016892 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows6.1-kb5016892-x64_52b68ba8744cb47ddfcecd19238087625e1a5fbd.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows6.1-kb5016892-x86_ffb5b83149833e7f969f69e4f152fee5c1fdbc68.msu) | | Windows 7 Embedded POSReady7 | Embedded | [3 Years](https://learn.microsoft.com/en-us/lifecycle/products/windows-embedded-posready-7)
Oct 2021 to Oct 2024 | Same as Windows 7 minus KB5016892 | | Windows 7 Embedded Standard | Embedded | [3 years](https://learn.microsoft.com/en-us/lifecycle/products/windows-embedded-standard-7)
Oct 2020 to Oct 2023 | Same as Windows 7 minus KB5016892 | | Windows Server 2008 R2 | ServerDatacenter, ServerStandard, ServerEnterprise
and their V/Core/VCore variants | [6 Years](https://web.archive.org/web/20170331081347/https://blogs.technet.microsoft.com/hybridcloud/2017/03/01/now-available-windows-server-premium-assurance-and-sql-server-premium-assurance/) with Premium Assurance License
Jan 2020 to Jan 2026 | Same as Windows 7 | | Windows Server 2012 | ServerDatacenter, ServerStandard and their Core variants | [3 Years](https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2012)
Oct 2023 to Oct 2026 | KB5017221 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows8-rt-kb5017221-x64_d01e9b9b910f5f1e374bc1b89a8d00c1a97e215f.msu)
KB2937636 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/crup/2014/07/windows8-rt-kb2937636-x64_29e0b587c8f09bcf635c1b79d09c00eef33113ec.msu) | | Windows 8.1 | Enterprise, Professional, EmbeddedIndustry and their E/N variants | ESU is not officially supported,
but you can manually install Server 2012 R2 (for x64) updates until Jan 2024,
and Embedded 8.1 (for x86) updates until July 2023 | Build 9600.17415
+
KB3021910 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/updt/2015/04/windows8.1-kb3021910-x64_e291c0c339586e79c36ebfc0211678df91656c3d.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/updt/2015/04/windows8.1-kb3021910-x86_7e70173bec00c3d4fe3b0b8cba17b095b4ed2d20.msu)
KB3172614 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/updt/2016/07/windows8.1-kb3172614-x64_e41365e643b98ab745c21dba17d1d3b6bb73cfcc.msu)-[x86](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/updt/2016/07/windows8.1-kb3172614-x86_d11c233c8598b734de72665e0d0a3f2ef007b91f.msu)
KB5017220 [x64](https://catalog.s.download.windowsupdate.com/c/msdownload/update/software/secu/2022/08/windows8.1-kb5017220-x64_d771111b22ec71560b207a6735d5ecebd47c4f38.msu)-[x86](https://catalog.s.download.windowsupdate.com/d/msdownload/update/software/secu/2022/08/windows8.1-kb5017220-x86_3134a18dac1b1fe4f656c9e25d0e4aaa75619d16.msu) | | Windows Server 2012 R2 | ServerDatacenter, ServerStandard and their Core variants | [3 Years](https://learn.microsoft.com/en-us/lifecycle/products/windows-server-2012-r2)
Oct 2023 to Oct 2026 | Same as Windows 8.1 | | Windows 10 | Education, Enterprise, IoTEnterprise,
Professional, ProfessionalEducation,
ProfessionalWorkstation, ServerRdsh and their N variants | [3 Years](https://learn.microsoft.com/en-us/windows/whats-new/extended-security-updates)
Oct 2025 to Oct 2028 | Windows 10 22H2 (19045.4957)
Just run Windows Update | ------------------------------------------------------------------------ ## Windows KMS Host - You can activate the Windows KMS host license using the TSforge option in MAS. - Script will auto-select the available CSVLK with most KMS Counted IDs. - Along with activation it will also charge the host with 25 clients which is a minimum required threshold for a working KMS host. - With Windows KMS host, you can activate the KMS client in your network. - This option is for the advanced users, you can check the below guides to understand more about it. https://learn.microsoft.com/windows-server/get-started/kms-create-host **Notes:** - **Use this activation only when necessary.** - On Windows 10/11, the system may randomly change the Windows edition later. This is a Windows issue and can be safely ignored. - KMS host license causes the sppsvc service to run continuously. ------------------------------------------------------------------------ ## Office KMS Host - You can activate the Office KMS host license using the TSforge option in MAS. - To activate an Office KMS host, you will need to download and run the installer for the appropriate license pack. - Along with activation it will also charge the host with 25 clients for a working KMS host. - With Office KMS host, you can activate the Office KMS client in your network. - This option is for the advanced users, you can check the below guides to understand more about it. https://learn.microsoft.com/office/volume-license-activation/plan-volume-activation-of-office#key-management-service-kms-activation-of-office **Notes:** - **Use this activation only when necessary.** - KMS host license causes the sppsvc service to run continuously.
Office KMS Host Links All links given below are official links hosted by Microsoft. | Version | Link | |----------------------|------------------------------------------------------------------------------------------------------------------------------------------| | Office 2010 KMS host | `https://download.microsoft.com/download/E/4/E/E4EF2B72-9F16-4D5F-9A1D-D9BE39A1C127/KeyManagementServiceHost_en-us.exe` | | Office 2013 KMS host | `https://download.microsoft.com/download/3/4/2/342F1FEA-CCB2-4F68-A6DE-041934383C18/office2013volumelicensepack_4701-1000_en-us_x86.exe` | | Office 2016 KMS host | `https://download.microsoft.com/download/5/E/3/5E329B97-6DC5-4AA7-9AA7-A5B5D46AF82F/office2016volumelicensepack_4324-1002_en-us_x86.exe` | | Office 2019 KMS host | `https://download.microsoft.com/download/F/6/0/F60CA746-5F03-482D-A331-15F38FB4AACA/office2019volumelicensepack_x86.exe` | | Office 2021 KMS host | `https://download.microsoft.com/download/8/e/e/8eef6160-396a-4c26-830d-9e2a24c00309/Office2021VolumeLicensePack_x86.exe` | | Office 2024 KMS host | `https://download.microsoft.com/download/1/4/0/140c97ae-7360-4dfc-9ba0-5f509600a06e/Office2024VolumeLicensePack_x86.exe` | - When prompted for a KMS host product key during installation, select "No". - On Windows 11 24H2/Server 2025 and newer, the VBScript FoD must be enabled for these installers to work. - Office 2019-2024 packs are only supported on Windows 8/Server 2012 and newer. - If installing multiple license packs on the same machine, make sure to install older versions before newer versions (ex. Install Office 2016 before Office 2024).
Office 2010 KMS Host Installer Workaround - Office 2010 license installer requires a workaround to install on Windows 10/11/Server 2016-2025: - Run the installer, and dismiss the resulting error message. - Launch Command Prompt as Administrator. - If you are using 32-bit Windows, run `notepad "%programfiles%\MSECache\OfficeKMS\kms_host.vbs"`. - If you are using 64-bit or ARM64 Windows, run `notepad "%programfiles(x86)%\MSECache\OfficeKMS\kms_host.vbs"` - Click `Edit > Replace`. - In the "Find" textbox type `>= "7"`, in the "Replace" textbox type `>= 1`. - Click "Replace All". - Save the file and close Notepad. - If you are using 32-bit Windows, run `cscript "%programfiles%\MSECache\OfficeKMS\kms_host.vbs"`. - If you are using 64-bit or ARM64 Windows, run `cscript "%programfiles(x86)%\MSECache\OfficeKMS\kms_host.vbs"`
Workaround to install on Non-Volume licensed Windows - All installers normally require volume-licensed Windows, but this can be worked around as well: - Follow the same procedure as for the above Office 2010 workaround, but replace `If isVL = False` with `If False`. - For Office 2019-2024 packs, the installer script to edit is named after the Office version (ex. `kms_host19.vbs` for Office 2019).
------------------------------------------------------------------------ ## Reset of Rearm / Timers / Tamper / Lock - You can use this feature in TSforge option in MAS. | Features | Info | |----------------------------|--------------------------------------------------------------------| | Reset Rearm Count | Reset rearm counter for infinite evaluation | | Reset Eval Period | Reset evaluation period for infinite evaluation | | Clear Tamper State | Clear the tamper state set due to store corruption or deletion | | Remove Evaluation Key Lock | Remove the product key change lock set for evaluation product keys | ------------------------------------------------------------------------ ## How to remove TSforge? - This activation method doesn't modify any Windows components and doesn't install any new file. Instead, it appends data to one of data files used by Software Protection Platform. - If you want to reset the activation status, - In MAS script, goto Troubleshoot and apply Fix Licensing option. - Done ------------------------------------------------------------------------ ## Manual Activation See the [TSforge README](https://github.com/massgravel/TSforge) for information on manually using TSforge. ------------------------------------------------------------------------ ## Command Line Switches - Check [here](command_line_switches.md). ------------------------------------------------------------------------ ## Setup Preactivation - Check the Extract OEM option in the MAS Extras section if you want pre-activated Windows installation. - Read more [here](oem-folder.md). ------------------------------------------------------------------------ ## Troubleshooting - Check [here](troubleshoot.md).