logoalt Hacker News

Wowfunhappylast Saturday at 7:45 PM9 repliesview on HN

What does this mean for using Windows in air gapped environments? I would have assumed this was common enough to make Microsoft want to support it.

Is it possible to activate via a web browser on a separate computer, similar to the flow for phone activation?


Replies

tormehlast Saturday at 8:03 PM

Microsoft is the US military's biggest supplier. There is definitely a solution for this. And that solution is probably not available to regular users.

show 6 replies
Aaron2222yesterday at 4:13 AM

As per the article:

  Now when trying to activate the OS by attempting to call the phone number for Microsoft Product Activation, an automated voice response says the following: "Support for product activation has moved online. For the fastest and most convenient way to activate your product, please visit our online product activation portal at aka.ms/aoh"
It does require logging in (to the website) with a Microsoft account, but Microsoft claims:

  By logging in with your account, it will not associate the account to the licenses.
From there, it's just a web version of phone activation (you enter your Installation ID and presumably they give you the Confirmation ID). No idea what happens when moving a licence between machines (with phone activation, the automated process would fail due to the existing activation and you'd be handed off to someone in a call center who would generate the Confirmation ID for you).
andixlast Saturday at 9:53 PM

I don't think regular Windows 11 is that useful in those cases. You probably either want an intranet connected Windows client, that gets activated and updated via a local server. Probably also a LTSC release, that doesn't get feature updates all the time.

Or a Windows 11 IoT image, that only enables some specific features, and is stripped down for a specific purpose.

For individual use I guess the solution is to set it up once with internet connectivity and air gap afterwards.

show 1 reply
9x39last Saturday at 8:09 PM

Key management services or Active Directory activation.

This is a small roadbump to home/smb free activations.

show 1 reply
bri3dlast Saturday at 8:15 PM

VAMT proxy activation, or full fledged volume licensing with KMS

show 1 reply
cheschirelast Saturday at 7:53 PM

you probably need to stand up a key management server (KMS)

show 1 reply
makeitdoublelast Saturday at 10:08 PM

Internal key activation can be done through a KMS host , which can be activated by phone (or some other dedicated mean if you're big enough for MS to care)

https://learn.microsoft.com/en-us/windows-server/get-started...

wvenablelast Saturday at 7:54 PM

Just don't activate. It's not necessary.

show 3 replies
navigate8310last Saturday at 9:51 PM

The closest solution is using IoT LTSC

show 1 reply