Offline licensing

Customer workflow

Axiom license activation is designed for restricted networks. The Management Server creates a machine-bound activation request and verifies the signed response locally.

1. Sign in to Management.
2. Open Settings > License Activation.
3. Select Download activation file to save the .axact request.
4. Move the request through the organization's approved transfer process.
5. Sign in to the Axiom customer portal and upload or provide the request to authorized Axiom staff.
6. Download the issued .axlic file from the customer portal.
7. Move the license back to the Management network.
8. Select Upload license file in Management.
9. Confirm status, expiry, SMB/DNS node limits, protected clients, and reputation limits.

No customer server sends the activation request automatically to the internet.

Security model

The .axlic file is signed with Axiom's private Ed25519 key. Customer installations contain only the public verification key. Editing customer name, limits, expiry, node bindings, or any other signed field invalidates the license.

Treat .axact and .axlic files as customer-confidential operational records. They contain system identity and entitlement information, not the private signing key.

Renewal

Before expiry, download a fresh activation request so current usage and machine identity are represented. The new license can be installed without exposing the private key or granting direct internet access to Management.

Troubleshooting

• Signature rejected: confirm the Management installation uses the official public verification key and the file was not modified in transit.
• Machine mismatch: issue the license from an activation request exported by the same Management Server.
• Limits too low: request a corrected license. Limits cannot be changed locally.
• File upload fails: confirm the file is the returned .axlic, not the original .axact.
• Portal file missing: confirm staff attached the issuance to the correct customer organization.