Kerio Control | Offline License File

From the offline Kerio Control console (either the local web UI or the admin console):

Offline licensing eliminates network timeouts, but introduces new failure vectors. Kerio Control Offline License File

| Failure Symptom | Root Cause | Fix | |----------------|------------|-----| | “Invalid Hardware ID” | You changed a disk, NIC, or motherboard. Offline licenses are hardware-locked. | Re-run the .req export and generate a new .lic file. You may need to request a license re-host from support. | | “License File Corrupted” | The .lic was opened/modified in a text editor (even viewing can break line endings). | Regenerate the file. Never edit a .lic manually. | | “Time Mismatch” | The firewall’s system clock differs from GFI’s signing server by >5 minutes (common in NTP-less air gaps). | Manually set the correct date/time via CLI or local console before applying license. | | “License Revoked” | GFI voided the license (e.g., chargeback). Since no online check occurs, the firewall continues working until reboot or manual check. | You must manually re-apply a new .lic. Offline systems do not auto-revoke. | From the offline Kerio Control console (either the

Generating and applying an offline license is rarely as simple as downloading a PDF. It requires a cryptographic handshake between your specific hardware and the vendor’s portal. | Re-run the

If your primary internet line fails and you are operating on a 4G backup with strict data caps, you might not want the firewall consuming data for license checks. You can switch to an offline license temporarily.