Microsoft quietly rewrites its activation rules for Windows 10

Windows product keys are almost (but not quite) a thing of the past.

With Windows 10, Microsoft has rewritten the rules for how it performs product activation on retail upgrades of Windows. The net result is that clean installs will be much easier--but only after you get past the first one.





OEM activation hasn't changed, nor have the procedures for activating volume license copies. But the massive Get Windows 10 upgrade push means that for the near future at least those retail upgrade scenarios are very important.


The biggest change of all is that the Windows 10 activation status for a device is stored online. After you successfully activate Windows 10 for the first time, that device will activate automatically in the future, with no product key required.



Microsoft is characteristically shy about discussing the details of activation. That's understandable, because every detail the company provides about its anti-piracy measures offers information that its attackers can use.That's a huge change from previous versions of Windows, which required a product key for every installation. And it's potentially an unwelcome surprise for anyone who tries to do a clean install of Windows 10 without understanding the new activation landscape.

But it's also frustrating, because Microsoft's customers who use Windows don't want to have to think about activation. The Windows PC you paid for, and the free upgrade you spent time installing, should just work.


I've had some way-off-the-record discussions with people who know a few things about the subject, and I've also done my own testing for the two weeks since Windows 10 was released to the public. Here's what I've learned.

Your Windows 10 license is stored online and linked to your device.

For more than a decade, one of the keys that Microsoft's activation servers have relied on is a unique ID, which is based on a hash of your hardware. That hash is reportedly not reversible and not tied to any other Microsoft services. So although it defines your device, it doesn't identify you.

Here's how that ID works with Windows 7 or Windows 8:

When you activate for the first time, that hashed value (let's call it your installation ID) is recorded in the activation database alongside the product key you entered with the installation. Later, when you reinstall the same edition of Windows on the same hardware, with the same product key, it's activated automatically. (Conversely, if you try to use that product key on a different machine with a different hardware ID, you'll probably be denied activation.)

Windows 10 goes one very large step further.

When you upgrade from Windows 7 or Windows 8.1, the Windows 10 setup program checks your current activation status and reports the result to the activation servers. If you're "genuine" (that is, properly activated), the Windows activation server generates a Windows 10 license certificate and stores it in conjunction with your installation ID and the version you just activated (Home or Pro).

It didn't need a product key to do that activation. All it needed was the proof from the Software Licensing Manager utility that your underlying activation was legit.

You can now wipe that hard disk completely, boot from Windows 10 installation media, and install a squeaky clean copy.

The Setup program asks you to enter a product key, but in a major change from Windows 8 and 8.1, it allows you to skip entering that key.





You'll be asked to enter that key a second time, later in setup, but you can skip past that box as well. When you finish the reinstall, assuming you used the same Windows 10 version on that hardware, you'll find it's automatically activated.

I've tested this scenario on multiple machines, and the result has been consistent:

Step 1: I booted from Windows 10 installation media, a USB flash drive prepared by the Windows 10 Media Creation tool, and tried a clean install on a system that had never been activated for Windows 10. I skipped both prompts to enter a product key. Result? My system failed activation.

Step 2: I reset the machine with its original, activated copy of Windows 7 or Windows 8.1 and then ran the Windows 10 online upgrade. At the end of the process, I confirmed that Windows 10 was properly activated.






Step 3: I then wiped the hard drive clean and used the exact same media as in Step 1 to do a clean install of Windows 10. As before, I skipped the product key entry. I used a Microsoft account in one test and used a local account in another. After the installation was complete, the system showed that it had a properly activated copy of Windows 10.

You can, of course, buy a full or OEM copy of Windows 10 on a flash drive, and you can also buy product keys online. You can use that product key to do a clean install on a system that has never run Windows 10 and it will get a license certificate from the activation servers. And just like those upgraded PC, it should then allow you to do a clean install of the same Windows 10 edition without having to re-enter the product key.

For those who are anxious to do a clean install, here's the trick:

Don't do the online upgrade.

Instead, from your current, activated copy of Windows 7 or Windows 8.1, download the Windows 10 ISO file for the corresponding edition (Home or Pro), or create a bootable USB flash drive. Without exiting your current Windows version, double-click the ISO to mount it as a virtual DVD (or open the USB flash drive with installation media) and then double-click Setup.

Your goal is to get to the screen with this full range of options:





Choose the option I've highlighted at the bottom: the one that says you want to keep nothing. The Windows 10 Setup program installs a clean copy of the edition that corresponds to the one you have installed. As part of the process, it verifies the activation status of your old Windows, creates the new license certificate, and blows away your previous install. And you never had to enter a product key.



After you restart, your clean copy of Windows 10 is activated, and you can reinstall it any time without having to worry about activation. And you'll never need a product key again.

That's all well and good for those who are currently running Windows 7 or Windows 8.1. But what about those who did a clean install of a preview edition, never upgrading over a licensed copy?

Sorry. You can skip the product key during installation, but when you're done with Setup your system will be marked as not activated. You won't be able to use any personalization options, and you'll have a persistent watermark on the desktop warning you that you need to activate.

To "get genuine," you're going to need to do one of two things: get a Windows 10 product key for the edition you have installed (you can use a key from MSDN or a retail source) or restore your old operating system, activate it, and then do the upgrade to register a license certificate.

I honestly have no idea how the telephone activation hotlines will respond to calls from Insiders who want to activate a copy for the first time. This is new territory for Microsoft and for its customers.