Offline Activation Tool (Windows) – Client & Support Workflow
This topic explains how to activate Seqrite Endpoint Protection (EPP) in restricted or air‑gapped environments using the offline activation tools.
Offline activation is designed for environments where the EPP server cannot directly connect to the activation server over the internet. The activation is completed using encrypted files exchanged between:
- The Offline Client Activation Tool (on the customer’s EPP server, Windows), and
- The Offline Support Activation Tool (used by Seqrite Support, currently on Ubuntu).
- Overview
In offline mode, the product key is activated through a three‑step file exchange:
- Customer generates an encrypted file containing product key and customer details.
- Support uses this file to activate/sync the license and returns an encrypted response file.
- Customer imports the response file to complete activation on the EPP server.
All files exchanged in this process are encrypted to ensure license data confidentiality and integrity.
- Components and OS Support
2.1 Offline Client Activation Tool (Customer side)
- Platform: Windows
- Location (batch file):
C:\Program Files\Seqrite\EndpointProtection\Admin\eppserveragent\ - Command to run:
Open Command Prompt as Administrator and run:
epp-serveragent.bat offlineact
This tool is bundled with the EPP Server Agent and must be executed from the Windows EPP server where you want to activate the license.
2.2 Offline Support Activation Tool (Support side)
-
Platform:
- Phase 1: Ubuntu only (current)
- Phase 2: Planned for Windows or Web portal (upcoming release)
-
Used internally by Seqrite Support engineers to:
- Validate the customer details file
- Perform activation or license sync
- Generate the response file to be sent back to the customer
Note: The offline support activation tool is not run by customers. It is used by Seqrite Support as part of handling your offline activation request.
- Prerequisites
Before you start:
- You have a valid product key for Seqrite Endpoint Protection.
- EPP Server is installed and you have administrative privileges on the server machine.
- You can exchange files with Seqrite Support (e.g., via email or secure file sharing).
- The EPP server may be completely offline / air‑gapped; internet connectivity is not required from the server itself.
- Offline Activation – End‑to‑End Flow
The offline activation is performed in three main steps:
- Customer: Generate offline activation request file
- Support: Activate or sync license and generate response file
- Customer: Import response file and complete activation
The following sections cover each step in detail.
- Step 1 – Generate Offline Activation Request File (Customer)
- Log in to the Windows server where EPP is installed.
- Open Command Prompt as Administrator.
- Navigate to the EPP Server Agent folder (if needed):
cd "C:\Program Files\Seqrite\EndpointProtection\Admin\eppserveragent"
- Run the offline activation batch file:
epp-serveragent.bat offlineact
-
When the Offline Client Activation Tool starts, you will see options similar to:
- Create offlineactivation.txt with customer details
- Save offline activation response from ofresponse.txt
-
Select option 1:
Create offlineactivation.txt with customer details -
Provide the requested information in the CLI prompts (for example, product key, organization/company details, contact information, etc.).
- All details must be entered manually.
- No real‑time validation is performed against the activation server.
- No OTP verification is required in offline mode.
- After you complete the inputs, the tool creates an encrypted file (for example, offlineactivation.txt) in the tool’s directory.
- Share this encrypted file with Seqrite Support through the agreed secure channel.
Important:
The details you enter in this step will be used by Support to activate your key. Once the key is activated based on this file, these details cannot be edited at the activation server. If something is incorrect, inform Support before activation is completed.
- Step 2 – Support‑Side Offline Activation / License Sync
This section describes what happens on the Support side. It is for information and audit purposes; customers do not need to execute these steps.
When Support receives your encrypted customer details file:
-
The Support engineer places the customer file in the same directory as the Offline Support Activation Tool.
-
The tool is executed on Ubuntu and prompts the Support engineer to choose an action:
- Activation
- License Sync
-
After successful activation or license sync, the tool generates an encrypted response file (for example, ofresponse.txt).
-
The Support engineer shares this response file with you, the customer.
- Step 3 – Import Response File and Complete Activation (Customer)
- Save the response file (for example, ofresponse.txt) received from Support to the same directory as the offline activation tool:
C:\Program Files\Seqrite\EndpointProtection\Admin\eppserveragent\
- Open Command Prompt as Administrator on the EPP Server.
- Navigate to the tool directory (if required):
cd "C:\Program Files\Seqrite\EndpointProtection\Admin\eppserveragent"
- Run the offline activation batch file again:
epp-serveragent.bat offlineact
- This time, select option 2:
Save offline activation response from ofresponse.txt - The tool reads and decrypts the response file and updates the EPP server activation status.
- If the file is valid and decryption succeeds, the offline activation completes successfully and your EPP server is activated.
- Error Handling and Troubleshooting
8.1 Invalid or Corrupted Response File
If the response file is invalid, corrupted, or does not match the original request, you may see an error similar to:
- Invalid Response File. Please contact support.
In this case:
- Do not modify or rename the files manually.
- Note down any error messages shown in the CLI.
- Share the exact error and the involved files with Seqrite Support for further analysis.
8.2 File Placement Issues
Ensure that:
-
Both the offline request file and the response file are placed in the same folder as:
- The offline client activation batch file (epp-serveragent.bat)
- The related JAR/tool binaries
Incorrect placement may lead to the tool being unable to detect or process the files.
8.3 Data Integrity and Security
- All offline activation files are encrypted to prevent tampering.
- During offline activation, the online activation server is not updated until Support completes the process using your request file.
- For the final activation call, the Support Offline Activation Tool acts as the “source of truth” for your license data.
- Notes and Limitations
-
Offline activation is intended for restricted or air‑gapped environments where the EPP server cannot directly contact the activation server.
-
The current implementation is CLI‑based:
- The previously planned console UI is not part of this release.
- The existing CLI solution has been extended instead.
-
The Offline Support Activation Tool is currently supported only on Ubuntu (Phase 1).
-
Future releases may provide:
- A Windows or Web portal based support tool (Phase 2).
- Additional UX improvements for offline/online selection from UI.