massgrave/massgrave.dev
massgrave/massgrave.dev
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
massgrave.dev/docs/tsforge.md
WindowsAddict 837f122b2d make plural
2025-02-22 19:51:54 +05:30

41 KiB
Raw Permalink Blame History

TSforge Activation

Overview

  • How to use it? Please find the instructions here.
  • This activation is permanent until a Windows reinstall or a major feature upgrade (not to be confused with small enablement upgrades or monthly cumulative updates).
  • This activation method doesn't modify any Windows components and doesn't install any new files.
  • Once the system is activated, hardware can be changed arbitrarily without triggering de-activation.
  • Internet is not required for this method.
  • This activation method can activate any of the following products if a phone license is available and licensing is managed by the system's SPP. For example,
    • Windows 7 and later
    • Windows Server 2008 R2 and later
    • Office 2013 and later (requires Windows 8 or later)
    • Windows addons (ESU, APPXLOB, etc.)
    • Windows and Office KMS Hosts (CSVLK)
  • Online validation (WAT) is bypassed on Windows 7.
  • In addition to the permanent activation of Windows and Office KMS Hosts, it also charges the KMS server with 25 clients (required for KMS client activation) for 30 days (maximum).
  • In addition to activation, it can reset the rearm count and evaluation period, clear the tamper state, and remove the evaluation key lock.

How does it work?

Process on Windows 7

Process on Windows 8 and later

  • Windows activation is managed by a subsystem called the Software Protection Platform (SPP).
  • SPP stores information about the activation state in files called the "physical store" and "token store".
  • The physical store's contents are cryptographically protected and integrity-checked by SPPSvc/SPSys, preventing users from easily modifying it.
  • The physical store is usually found at these locations:
    • Windows 7 - C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 and C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
    • Windows 8 - C:\Windows\System32\spp\store\data.dat
    • Windows 8.1/10/11 - C:\Windows\System32\spp\store\2.0\data.dat
  • The token store is usually found at these locations:
    • Windows 7 - C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\SoftwareProtectionPlatform\tokens.dat
    • Windows 8 - C:\Windows\System32\spp\store\tokens.dat
    • Windows 8.1/10/11 - C:\Windows\System32\spp\store\2.0\tokens.dat
  • In normal product key installation and phone activation, associated data is written to the physical store and token store. Said phone activation data is cryptographically checked against the Installation ID before being written. When SPP relaunches, it is only given a very basic check against the current Hardware ID.
  • By writing forged data directly to the physical store and token store, we can bypass both checks, causing SPP to believe it installed a fake product key and/or confirmation ID.
  • To bypass checks for hardware changes, a Hardware ID with a threshold of 0 is included in this forged data.
  • On Windows 7, the fake product key data does not contain a value known as the "Key Unique ID". This value is required for both WAT and online activation, so removing it causes both to be non-functional, preventing WAT from triggering de-activation.
  • The presence of valid product key and confirmation ID data causes SPP to activate the specified product as long as it is capable of phone activation.
  • This process is implemented as the ZeroCID option in TSforge.

Supported Products

This activation method can activate any of the following products if a phone license is available and licensing is managed by the system's SPP.

  • Windows
    • Windows 7
    • Windows 8
    • Windows 8.1
    • Windows 10
    • Windows 11
  • Windows Server
    • Windows Server 2008 R2
    • Windows Server 2012
    • Windows Server 2012 R2
    • Windows Server 2016
    • Windows Server 2019
    • Windows Server 2022
    • Windows Server 2025
  • Microsoft Office (Requires Windows 8 or later) (Also supports UWP version of Office)
    • Office 2013
    • Office 2016
    • Office 2019
    • Office 2021
    • Office 2024
  • Windows Addons
    • Commercial Extended Security Updates (ESU)
      • Windows 7 (Enterprise, Professional, Ultimate and their E/N variants)
      • Windows Embedded POSReady 7 (Embedded)
      • Windows Embedded Standard 7 (Embedded)
      • Windows Server 2008 R2 (ServerDatacenter, ServerStandard, ServerEnterprise and their V/Core/VCore variants)
      • Windows Server 2012 (ServerDatacenter, ServerStandard and their Core variants)
      • Windows 8.1 (Enterprise, Professional, EmbeddedIndustry and their E/N variants)
      • Windows Server 2012 R2 (ServerDatacenter, ServerStandard and their Core variants)
      • Windows 10 (Education, Enterprise, IoTEnterprise, Professional, ProfessionalEducation, ProfessionalWorkstation and their N variants)
    • 8/8.1 APPXLOB
      • Client
      • Embedded Industry
      • Embedded Standard
      • Server 2012
    • Others (Can be selected from the manual option)
      • OCUR
  • KMS Hosts (CSVLK)
    • Windows 7 and later
    • Windows Server 2008 R2 and later
    • Office 2010 and later

:::info

  • All architectures (x86, x64 and arm64) are supported.
  • For Windows, the script's key preference is: OEM_DM > OEM_COA_SLP > OEM_COA_NSLP > MAK > RETAIL
  • For Office, the script's key preference is: OEM_COA_NSLP > MAK > RETAIL

:::

Unsupported Products

This activation method does not work if a phone license is not available or if licensing is not managed by the system's SPP.

  • Windows Vista / Server 2008
  • Office on Windows 7
    • Its licensing is based on OSPP, not SPP.
    • You can use Online KMS option in MAS to activate it.
  • Office 2010
    • Its licensing is based on OSPP, not SPP.
    • You can use Online KMS option in MAS to activate it.
  • Office 365
    • Phone activation license is not available. TSforge option will install Mondo 2016 license (feature-wise equivalent to 365) instead to activate Office.
    • You can use Ohook option in MAS to activate it.
  • Windows Evaluation editions (Windows 8 / Server 2012 and later)
    • Permanent activation license is not available. TSforge option will reset the evaluation period instead.
  • Windows Evaluation editions (Windows 7 / Server 2008 R2)
    • WLMS service protects the SPPSVC service and prevents it from stopping. Although permanent activation license is available, its officially not supported.
  • Server Azure Datacenter (ServerTurbine) edition
    • It does not support activation on non-azure systems.
  • Windows 10 Consumer ESU (1 Year)
    • Its licensing is based on CLIP, not SPP.
    • You can activate commercial ESU for 3 years on Pro and higher level editions with TSforge.

:::info

Windows Vista: Unlike Windows 7, Vista SPSys constantly holds an exclusive handle to the physical store, preventing user-mode programs from writing to it. This has prevented us from adding support for it.

OSPP based Office: Physical store is stored in the registry in a format that has not yet been reverse engineered.

:::

ZeroCID / KMS4k / AVMA4k

  • TSforge is included in MAS and it also has its own standalone release.
  • TSforge includes the ZeroCID / KMS4k / AVMA4k activation methods.
  • KMS4k and AVMA4k are proof-of-concept methods with limitations, so we do not recommend using them.
  • MAS uses the ZeroCID method only and does not include KMS4k or AVMA4k, as ZeroCID can already activate all available products permanently.
Methods Info
ZeroCID Offline permanent activation / until reinstall/feature upgrade
KMS4k Offline KMS activation for over 4000 years / until reinstall/feature upgrade
AVMA4k Offline AVMA activation for over 4000 years (Server 2012 R2+ only) / until reinstall/feature upgrade

Windows ESU

  • Microsoft offers paid Extended Security Updates (ESU) for several Windows versions after their product lifecycle ends.
  • You can activate the Windows ESU / Premium Assurance license using the TSforge option in MAS.
Windows Version Supported Editions List ESU Period Minimum Required Updates
Windows 7 Enterprise, Professional, Ultimate
and their E/N variants		 3 Years
Jan 2020 to Jan 2023

4-6 Years ESU is not officially supported,
but you can manually install Server 2008 R2 x64 updates until Jan 2026		 Windows 7 SP1
+
KB4490628 x64-x86
KB4474419-v3 x64-x86
Reboot
KB5039339 x64-x86
KB4575903 x64-x86
KB3138612 x64-x86
KB5016892 x64-x86
Windows 7 Embedded POSReady7 Embedded 3 Years
Oct 2021 to Oct 2024		 Same as Windows 7 minus KB5016892
Windows 7 Embedded Standard Embedded 3 years
Oct 2020 to Oct 2023		 Same as Windows 7 minus KB5016892
Windows Server 2008 R2 ServerDatacenter, ServerStandard, ServerEnterprise
and their V/Core/VCore variants		 6 Years with Premium Assurance License
Jan 2020 to Jan 2026		 Same as Windows 7
Windows Server 2012 ServerDatacenter, ServerStandard and their Core variants 3 Years
Oct 2023 to Oct 2026		 KB5017221 x64
KB2937636 x64
Windows 8.1 Enterprise, Professional, EmbeddedIndustry and their E/N variants ESU is not officially supported,
but you can manually install Server 2012 R2 (for x64) updates until Jan 2024,
and Embedded 8.1 (for x86) updates until July 2023		 Build 9600.17415
+
KB3021910 x64-x86
KB3172614 x64-x86
KB5017220 x64-x86
Windows Server 2012 R2 ServerDatacenter, ServerStandard and their Core variants 3 Years
Oct 2023 to Oct 2026		 Same as Windows 8.1
Windows 10 Education, Enterprise, IoTEnterprise,
Professional, ProfessionalEducation,
ProfessionalWorkstation, ServerRdsh and their N variants		 3 Years
Oct 2025 to Oct 2028		 Windows 10 22H2 (19045.4957)
Just run Windows Update

Windows KMS Host

  • You can activate the Windows KMS host license using the TSforge option in MAS.
  • Script will auto-select the available CSVLK with most KMS Counted IDs.
  • Along with activation it will also charge the host with 25 clients which is a minimum required threshold for a working KMS host.
  • With Windows KMS host, you can activate the KMS client in your network.
  • This option is for the advanced users, you can check the below guides to understand more about it.

https://learn.microsoft.com/windows-server/get-started/kms-create-host

Notes:

  • Use this activation only when necessary.
  • On Windows 10/11, the system may randomly change the Windows edition later. This is a Windows issue and can be safely ignored.
  • KMS host license causes the sppsvc service to run continuously.

Office KMS Host

  • You can activate the Office KMS host license using the TSforge option in MAS.
  • To activate an Office KMS host, you will need to download and run the installer for the appropriate license pack.
  • Along with activation it will also charge the host with 25 clients for a working KMS host.
  • With Office KMS host, you can activate the Office KMS client in your network.
  • This option is for the advanced users, you can check the below guides to understand more about it.

https://learn.microsoft.com/office/volume-license-activation/plan-volume-activation-of-office#key-management-service-kms-activation-of-office

Notes:

  • Use this activation only when necessary.
  • KMS host license causes the sppsvc service to run continuously.
Office KMS Host Links

All links given below are official links hosted by Microsoft.

Version Link
Office 2010 KMS host https://download.microsoft.com/download/E/4/E/E4EF2B72-9F16-4D5F-9A1D-D9BE39A1C127/KeyManagementServiceHost_en-us.exe
Office 2013 KMS host https://download.microsoft.com/download/3/4/2/342F1FEA-CCB2-4F68-A6DE-041934383C18/office2013volumelicensepack_4701-1000_en-us_x86.exe
Office 2016 KMS host https://download.microsoft.com/download/5/E/3/5E329B97-6DC5-4AA7-9AA7-A5B5D46AF82F/office2016volumelicensepack_4324-1002_en-us_x86.exe
Office 2019 KMS host https://download.microsoft.com/download/F/6/0/F60CA746-5F03-482D-A331-15F38FB4AACA/office2019volumelicensepack_x86.exe
Office 2021 KMS host https://download.microsoft.com/download/8/e/e/8eef6160-396a-4c26-830d-9e2a24c00309/Office2021VolumeLicensePack_x86.exe
Office 2024 KMS host https://download.microsoft.com/download/1/4/0/140c97ae-7360-4dfc-9ba0-5f509600a06e/Office2024VolumeLicensePack_x86.exe
  • When prompted for a KMS host product key during installation, select "No".
  • On Windows 11 24H2/Server 2025 and newer, the VBScript FoD must be enabled for these installers to work.
  • Office 2019-2024 packs are only supported on Windows 8/Server 2012 and newer.
  • If installing multiple license packs on the same machine, make sure to install older versions before newer versions (ex. Install Office 2016 before Office 2024).
Office 2010 KMS Host Installer Workaround
  • Office 2010 license installer requires a workaround to install on Windows 10/11/Server 2016-2025:
    • Run the installer, and dismiss the resulting error message.
    • Launch Command Prompt as Administrator.
    • If you are using 32-bit Windows, run notepad "%programfiles%\MSECache\OfficeKMS\kms_host.vbs".
    • If you are using 64-bit or ARM64 Windows, run notepad "%programfiles(x86)%\MSECache\OfficeKMS\kms_host.vbs"
    • Click Edit > Replace.
    • In the "Find" textbox type >= "7", in the "Replace" textbox type >= 1.
    • Click "Replace All".
    • Save the file and close Notepad.
    • If you are using 32-bit Windows, run cscript "%programfiles%\MSECache\OfficeKMS\kms_host.vbs".
    • If you are using 64-bit or ARM64 Windows, run cscript "%programfiles(x86)%\MSECache\OfficeKMS\kms_host.vbs"
Workaround to install on Non-Volume licensed Windows
  • All installers normally require volume-licensed Windows, but this can be worked around as well:
    • Follow the same procedure as for the above Office 2010 workaround, but replace If isVL = False with If False.
    • For Office 2019-2024 packs, the installer script to edit is named after the Office version (ex. kms_host19.vbs for Office 2019).

Reset of Rearm / Timers / Tamper / Lock

  • You can use this feature in TSforge option in MAS.
Features Info
Reset Rearm Count Reset rearm counter for infinite evaluation
Reset Eval Period Reset evaluation period for infinite evaluation
Clear Tamper State Clear the tamper state set due to store corruption or deletion
Remove Evaluation Key Lock Remove the product key change lock set for evaluation product keys

How to remove TSforge?

  • This activation method doesn't modify any Windows components and doesn't install any new files. Instead, it appends data to one of data files used by Software Protection Platform.
  • If you want to reset the activation status,
    • In MAS script, goto Troubleshoot and apply Fix Licensing option.
    • Done

Manual Activation

See the TSforge README for information on manually using TSforge.

Command Line Switches

Setup Preactivation

  • Check the Extract OEM option in the MAS Extras section if you want pre-activated Windows installation.
  • Read more here.

Troubleshooting