Windows 10: How does Microsoft store activation credentials?

As has been said already, MS keeps a digital signature of your hardware on their activation servers, and will auto-activate if Windows 10 (of the same edition) is re-installed. This hash is similar the one introduced with Windows XP activation, where it contains a combination of hashes from different equipment (Motherboard, CPU, Network MAC, Hard Disks, etc..), but it's smart enough that you can replace several of these before it requires re-activation. In practice, I haven't seen a re-activation requirement for anything other than a motherboard though.

Also, many OEM computers that come with Windows 10 also have the OEM key installed in the BIOS, so regardless of whether it's been installed before, it will still activate. If they bought the computer with Windows 10, then it won't even ask for the key. If they had upgraded to Windows 10, then you need to choose "I don't have a key" when installing and it will auto-activate either way.

 

My Bios does not have any form of a windows key. Yes I know about the option of adding a key later. I was only curious . I misread where you stated that, I have never used a Win 10 local account so I was activated when I updated from Win 7 to Win 10 and that was stored on their activation server. My only question now is why does MS every now and then want me to very my pin number?

 

Only Windows 8 and 10 Computers have an Embedded key. And its only there if the OEM adds it. If you buy an of the shelf motherboard from say NewEgg, it isn't going to have an embedded key. Buy a Windows 10 PC from Dell, Acer, ASUS, etc and it will have an embedded key. Once you have a DL it doesn't matter if the key is there or not. Systems with no embedded key still get a DL just like systems with an embedded key. You can even override the embedded key with a PID.txt file. I did this on my laptop, it has a Windows 8 Core OEM key. In the past Windows 10 install media would read it and install 10 Home. I wanted Pro installed so my PID.txt has a Pro key in it. It overrides the embedded key and installs Pro instead of Home.

I have no idea why your being repeatedly asked to verify? Hasn't happened to me ever, and I use a PIN on my laptop. I have to verify my ID on a clean install but I only ever have to do that once on that PC. Then I'm good until the next clean install.

 

Thanks for your info. It only take me seconds to verify the pin..Not a real problem.

 

Newer machines (after 2010) have a TPM (Trusted Platform Module) security device, a chip on the motherboard.
Machine ID is "burned" to it.

 

Hi there

The REAL problem with clean install is that if you don't add the ei.cfg file like I've posted previously then the default install is WINDOWS HOME - even though your update (with a digital licence) was PRO.

Note - unless you know how the wretched system works then most people (and I'm not a total beginner in this stuff although I always defer to more experienced guys than me) will after doing a clean install not assume that the edition had reverted BACK from PRO to HOME -- I only found out by accident --I tried to alter some profile and when that didn't exist I realized something was amiss. Installing a different edition will obviously look for a new licence.

So Ms isn't actually trying to swindle anybody -- it's just they haven't yet got their act together for people who want to do CLEAN installs after doing the initial upgrade.

BTW the "Free Upgrade" from W7/W8/W8.1 is STILL working - but I suspect that door will be closing soon.

@Comp Cmndo

I'm not sure I want a TPM module in my computer --Who knows --CIA / Trump / N.Korea or whatever -- that type of chip could really sink any computer privacy FOREVER.

Sometimes people go with TOO HIGH TECH -- a lot of the most sophisticated detection systems on the planet can be easily defeated via OLD SCHOOL TECH. -- I'll bet that once something gets posted into a US Mailbox -- even "The Holy Ghost" couldn't get at the package until it was on the way out to the final recipient !!!! and even then He wouldn't be able to ascertain the delivery time. !!!

Cheers
jimbo

 

Not always. Windows 10 setup will only pick the version to install for you if it finds a pre-existing indication on the computer itself as to which version should be installed. The order of preference Windows setup uses to predetermine which version should be installed is a PID.txt file (or other answer file) in the \sources folder of the install media, a product key stored in UEFI/BIOS, or a product key input by the user. If Windows setup does not find a product key or specified version to install by any of those methods, it does NOT default to Windows 10 Home. It will ask the user which version they want to install after clicking on "I don't have a product key".

 

*Ditto On my two desktop PC's with legacy BIOS and no OEM embedded key, I get prompted to enter a key. If I click "I don't have one" the menu to select Home or Pro comes up. It does not auto install Home. That used to happen on my laptop. It has a Windows 8.0 Core OEM embedded key. If I didn't modify my install media with a PID.txt file, 10 Home was auto installed with no prompt for a key and no selection menu. Happily, the CU now ignores Windows 8 OEM keys. I get prompted for a key and can install what ever I want from the selection menu.

 

OK gonna get a bit technical now, but bear with me ...

Windows stores the licence details in database files called tokens.dat (in addition to registry dependencies for hash checks etc)... Legacy (non-DL) in the spp folder under system32... digital licences are classified as a store licence (gets lumped together with the apps downloaded from there and subject to renewal at certain intervals.. according to event log, anyway)
... and stored in the tokens.dat in programdata\microsoft\windows\clipsvc folder - each also uses their own services to activate as well... *Wink

 

Hi there
@NavyLCDR

I always LIKE your posts and agree usually 100% of the time - but in this case unfortunately you are INCORRECT --just try wiping your HDD and installing the CU edition FROM SCRATCH after first having done an update via the usual methods.

Your windows update edition needs to be AT LEAST version 1703 -- any earlier versions then of course what I'm posting here is BONKERS. I.E use a CU 1703 ISO or rufus bootable USB with 1703 on it - and install after an initial update from a previous version of Windows . (I mean here that your CURRENT running edition should be the 1703 version after you did an UPGRADE -- not a clean install -- from a previous version). If you aren't already running 1703 then do the upgrade FIRST before the clean install.

So to update to 1703 from a previous version of windows do the following :

a) take backup of existing installation so you don't have to re-do after the next step. (Macrium etc -- so you can restore if it doesn't work).

b) wipe HDD and install clean the 1703 ISO

Please try a CLEAN update and see what happens -- even a VM should be a good enough test. The default always is HOME unless you fix the ei.cfg file like I've posted previously.



Cheers
jimbo

 

@SIW2
I recall a post of yours @ EF regarding Jim's CAPS thingy.. he's still got it LOL

Back to topic...

Why the need for an efi.cfg when installing CU?

 

I've done numerous clean installs with stock install media, AU and CU, and they DO NOT auto install the Home edition as default. You first prompted for a product code. Enter one and the matching edition is installed. Click "I don't have one" and you'll get a selection menu. If its an MSDN ISO the options are Home or Pro. If its the MCT ISO your options are Home, Pro Education, and I think Home SL. If yours is installing Home maybe its because you added an ei'cfg?

EDIT: Home may be highlighted, pre selected in the selection menu but you can easily change that with one mouse click. Unless your just blindly clicking every yes button that comes up.

 

You don't need it.

 

You might have one now & you never would know.
Earlier TPM versions did less. Had one a couple years ago on a used Dell laptop, where the BIOS (not UEFI) had many settings locked. Needed the proprietary Dell software to unlock it. It can also be cleared by shorting the correct pins of the TPM & there is more than one variation of the chip.

 

That's exactly the way clean installs of CU have been on my computers as well. Since you don't actually have to install Windows 10 to test it, I just booted my laptop which has no product key stored in UEFI from Windows 10 ver 1703 USB flash drive created with the most recent MCT. My current Windows 10 is Education upgraded from Windows 10 Pro digital license:





This is the third Windows of Windows setup after booting from the USB flash drive:





After I click "I don't have a product key", this is the next window: