Installation

Product Activation, or Microsoft Product Activation (MPA) as it has become known, was not exactly a welcome addition in Windows XP. It was, however, not introduced in Windows XP, as it existed in late versions of Office 2000, all versions of Office XP, and Visio 2002. MPA works to stop casual copying of software by tying the hardware profile of a computer to software installation.

In the next sections, we are going to take a in-depth look at Product Activation, including the different activation scenarios that exist, how Product Activation works including what information it transmits to Microsoft, and how Product Activation will affect you.

When dealing with Product Activation, there are three scenarios that can occur. Without exception, you should fall into one of these three scenarios:

• Retail box purchases

• OEM installations

• Volume licensing

Retail Box Purchases

Retail box purchases of Windows XP Professional present the most complex and confusing situation when it comes to dealing with Product Activation. Product Activation depends on submission of the Installation ID to Microsoft. The Installation ID is a unique number generated from two different pieces of information about a computer: the Product ID number and a hardware hash. The Installation ID has been designed to ensure anonymity in that no personally identifying information is ever transmitted to Microsoft. Instead, the Installation ID serves to deter and prevent software piracy by preventing installations of Windows XP Professional that violate its license.

The Product ID uniquely identifies one and only one copy of Windows XP Professional, and is created from the Product Key used during the installation of Windows XP. Each retail copy of Windows XP Professional has a unique Product Key, and thus every Product ID generated from a valid Product Key is also unique. Additionally, as in the past, the Product ID is used by Microsoft for support calls. You can view your Product ID (see Figure 3.28) by looking at the General tab of the System applet in the Control Panel (alternatively, you can access this applet by right-clicking on My Computer and selecting Properties from the context menu).

Figure 3.28 Viewing the Product ID.

The hardware hash is an eight-byte value that is created by taking information from 10 different components inside the computer and running this information through a mathematical calculation. The hash process is one-way and thus this information cannot be reverse-engineered to yield any specific details about the computer from which it was obtained. The hardware hash also only uses a portion of each individual component hash value, thus further increasing user anonymity and preventing Microsoft from collecting any personally identifying information during the process of implementing Product Activation. Hardware hashes will be discussed at greater length in the "How Product Activation Works" section later in this chapter.

OEM Installations

A large majority of users acquire Windows XP Professional in the process of purchasing a new computer. For these customers, since Windows XP Professional is pre-loaded onto the new computer already, no activation will be required by the consumer. OEMs can pre- activate Windows XP Professional as part of the setup and configuration process before the new computer ever leaves the manufacturer. The overwhelming majority of new computers that feature Windows XP Professional will be pre-activated by the OEM before shipping. The chief difference between how OEMs license Windows XP Professional comes in how they choose to implement Product Activation.

System Locked Pre-installation

Many OEM computers come with a system restore CD-ROM that allows the user to perform a complete reinstallation or repair of the installed software components, including the operating system. In this way a specific CD-ROM can be tied to a specific system BIOS, thus preventing the CD from being used to install Windows on any other computer. Although OEM CD BIOS locking is not new, it has been expanded and now features integrated Product Activation. This method of protecting the software product is called System Locked Pre-installation, or SLP.

When SLP is implemented, the information stored in the BIOS is what protects against casual piracy such as installing the product on another computer. No communication is required with the Microsoft activation center, and thus the hardware hash value is required to be calculated. This form of Product Activation relies entirely on the BIOS information matching the SLP information at boot time. Since no hardware hash is calculated, you could thus change out every piece of hardware in the OEM computer without the need for reactivation of Windows XP Professional. In cases where the motherboard must be replaced, this could also be done without reactivation as long as the replacement motherboard was from the same OEM and contained the proper BIOS. Should a different motherboard be installed in the OEM computer that has non-matching BIOS information, the Windows XP Professional installation would then require reactivation within 30 days via the Internet or telephone call.

Using Standard Product Activation

If desired, an OEM can also activate a Windows XP Professional installation in the same way that retail purchase versions are activated. OEM computer installations activated using the standard Product Activation methods have all of the same restrictions that retail purchase versions of Windows XP Professional do.

No OEM Product Activation

Some OEMs may choose to not activate Windows XP Professional at all. New OEM computers that are purchased which fall under this category will require Product Activation by the consumer using the standard Product Activation methods, either via the Internet or by telephone call to Microsoft.

Volume Licensing

The simplest of all scenarios occurs when dealing with Windows XP Professional licenses acquired through one of the Microsoft volume licensing agreements, such as Microsoft Open License, Enterprise Agreement, or Select License. Such installations will not require activation.

Windows XP Professional installations that are performed using volume licensing media and volume licensing keys (VLK) have no Product Activation, hardware checking, or limitations on product installation or disk imaging.

How Product Activation Works

As mentioned previously, the hardware hash and the Product ID are the two parts that make up the Installation ID. The Product ID is directly tied to the Product Key that is supplied with the Windows XP Professional retail product. OEMs will usually supply the Product Key with media they ship with new computers. Of the Product ID and the hardware hash, only the hardware hash truly identifies a particular computer—enough so for Product Activation's purposes anyhow. Thus, the hardware hash is of some concern to us, as it ultimately controls how Product Activation functions and whether or not activation is required on an installation.

Table 3.1 lists the hardware components that are utilized in calculating the hardware hash and the length of the data (in bits) that makes up the hardware hash. The hardware hash value is comprised of two 32-bit double words, for a total of 64 bits (or eight bytes) worth of data.

Table 3.1 Hardware Hash Components

The first four components make up the first double word value, with the rest of the list making up the second double word value. With the exception of amount of installed RAM and the hardware hash version, all other values are calculated using selected bits of an MD5 hash.

The value for a docking-capable computer also includes PCMCIA cards, as using either a docking station or PCMCIA cards can lead to hardware appearing and disappearing. This can lead to the appearance of devices being changed when they are simply not present at that time—such as when a portable computer is undocked.

The possible values for the installed RAM value are listed in Table 3.2. As of the time of writing, the hardware hash value is always set to a value of 001 decimal, which is a hex value of 0x01. If a component is not installed, such as a SCSI host adapter, then the value returned in the hardware hash will be a zero value.

Table 3.2 RAM Amounts and Corresponding Hash Values

As an example, the processor serial number is 96 bits in length. When Product Activation performs the hash calculation on that 96-bit value, it returns a 128-bit long value. Of these 128 bits in the hash value, only six bits of data is actually used in the hardware hash value that forms part of the Installation ID.

Six bits provides 64 different combinations (2^6), thus for the millions of computers in existence, only 64 possible processor hash values are possible. As only a fraction of the original data is used in the Product Activation calculation, the data cannot be reverse engineered, as previously mentioned. The processor serial number can never be determined from these six bits of data; the same holds true for all of the other components that Product Activation performs hashes on. In this way, the hardware hash has purposely been designed by Microsoft to ensure the user's privacy is respected at all times.

During the installation of Windows XP Professional, the hardware hash is calculated. This eight bytes of data, when combined with the Product ID (nine bytes) makes up the Installation ID. When Product Activation is conducted via the Internet, this seventeen bytes of data is sent to the Microsoft activation servers in binary format, along with header information, over a secure sockets (SSL) connection.

The activation process requires three steps when completed over the Internet:

1. A handshake request, which establishes the connection between the Windows XP Professional computer and the Microsoft activation servers.

2. A license request, in which the Windows XP Professional computer asks for a PKCS10 digital certificate from the Microsoft activation servers.

3. An acknowledgement request, in which the Microsoft activation servers transmit a signed digital certificate activating the installation.

If the Internet activation succeeds then Product Activation is complete and will not again become an issue unless you exceed the maximum number of allowed changes, as detailed in the "Number of Changeable Items" section.

Should Internet activation not be feasible or desirable, telephone activation is possible as outlined in the following process.

1. Locate the appropriate telephone number by selecting the country from which you are calling.

2. Provide the 50 decimal digit Installation ID to the Microsoft representative.

3. Enter in the corresponding 42 decimal digit Confirmation ID as supplied by the Microsoft representative.

Number of Changeable Items

Once Windows XP Professional has been activated, the hardware hash will be rechecked at every user logon event. This serves to reduce another prevalent form of software piracy—that of disk cloning. Disk cloning is an asset to administrators looking to quickly deploy multiple copies of Windows XP Professional, but is illegal without having the required Product Keys. In most legal cases, disk cloning is done using a volume license copy of Windows XP Professional using a Volume License Key, which does not require Product Activation in the first place.

When Windows XP Professional performs its hardware check, it is looking for changes in the hardware configuration of the computer. If a substantially different configuration is detected then reactivation is required. The actual number of components that will result in a reactivation scenario is discussed shortly. The hardware check at login is done after the SLP BIOS check should the SLP BIOS check fail. As long as an OEM computer is using a genuine replacement motherboard from the OEM containing the correct BIOS data, all other components in an OEM computer activated using the SLP BIOS method can be changed out without requiring reactivation of Windows XP Professional.

The number of hardware items that it takes to achieve "substantially different" (in Microsoft speak) is dependent upon two things: whether or not the computer has a network adapter at the time of Windows XP activation, and whether or not the computer is dockable (this also includes the presence of PCMCIA slots), as outlined in Table 3.3.

Table 3.3 Number of Changed Components to Require Reactivation

To help explain Table 3.3, a couple scenarios might be helpful.

1. A computer has a network adapter installed at the time of Windows XP Professional activation. You later change the motherboard, CPU, video adapter, and CD-ROM drive. Additionally, you add more memory and a second hard drive.

Reactivation is not required in this instance because only five components have been changed: motherboard, CPU, video adapter, CD-ROM and RAM (amount). The addition of a second hard drive is not of significance to Product Activation. If you were to change six or more hardware components, reactivation would be required.

2. A computer has no network adapter installed at the time of Windows XP Professional activation. You later change the motherboard, CPU, video adapter, and CD-ROM drive. Additionally, you add more memory and a second hard drive.

Reactivation is required in this instance because five components have been changed: motherboard, CPU, video adapter, CD-ROM, and RAM (amount). When you change four or more hardware components, reactivation is required.

If a single device is changed repeatedly, such as a video adapter that is changed from the original one to new adapter A then later to new adapter B, this is evaluated only as one change. Either the current hardware is the same as when activation was completed or it's not. Windows XP doesn't care how many changes have been made in the interim. Adding components after activation that were not present at the time of activation also has no impact on the hardware hash and is ignored by Windows XP Professional during its check to determine whether reactivation is necessary. Microsoft has also built in two additional loopholes into Product Activation for power users who frequently reinstall Windows XP Professional or who frequently change the hardware configuration of their computers. Windows XP Professional can be reinstalled and subsequently reactivated on the same computer an infinite number of times. In cases where the hardware configuration has changed enough to require reactivation, Microsoft allows a maximum of four reactivations per year on "substantially different" hardware—this should be enough to keep most power users happy as they continually tweak their systems. Both of these reactivation events can occur over the Internet instead of requiring a phone call.