Home / Tools / Desktop App / Offline Activation

Offline & Air-Gapped Activation

The Compliance Tracker runs on machines that can never reach the internet — common in the closed networks where CUI actually lives. A signed license file, downloaded from any connected machine, activates the device with the same cryptographic verification as an online activation.

How It Works

An air-gapped device is licensed by importing a machine file that was issued for its fingerprint. The imported file goes through exactly the same Ed25519 signature verification and device-fingerprint binding as an online activation — nothing about the trust model is relaxed. You'll need three things:

Step by Step

  1. Copy the device fingerprint

    On the air-gapped device, open the app's activation screen, choose "This device can't go online?", and copy the device fingerprint it shows you.

  2. Download your license file

    On any machine with internet access, paste your license key and the fingerprint into the form below. Your browser downloads a signed machine.lic file. Registering a new device consumes an activation seat, just like an online activation.

  3. Import the file on the air-gapped device

    Move machine.lic to the device (USB etc.) and import it from the same "This device can't go online?" panel. The app verifies the signature, the fingerprint binding, and the validity window before trusting it.

  4. Renew before the file lapses

    Before the "Works offline until" date passes, use the form again — same key, same fingerprint — and import the fresh file, from the License modal or from the gate if the old file has already lapsed. Nothing is lost when a file lapses; your assessment data stays put, and the app simply gates until a fresh file is imported (or the device gets online once).

Get Your License File

Nothing here is stored — the key authenticates the request, the file comes straight back to your browser. Paid licenses get a file valid for 1 year; a trial key's file lasts through the trial.

machine.lic is downloading

Move it to the air-gapped device and import it from the "This device can't go online?" panel. Download didn't start? Save it again.

Good to Know

How long files last. A paid license gets a file valid for 1 year; a trial key's file lasts through the trial, and both are capped by the license's own expiry. Keep in mind that revocations, suspensions, and seat changes only reach an air-gapped device when it imports a fresh file (online devices refresh weekly) — renew earlier, or briefly connect the device, if you need a change to land sooner.

The device clock matters. Files "issued in the future" beyond a 24-hour tolerance are rejected (rollback protection), so a badly wrong clock on the air-gapped device surfaces as a stale-file error at import.

One offline device per license. The first device you request a file for becomes your license's designated offline device — files are only ever issued for that fingerprint. To license a different offline device, email support@getcmmc.consulting with the new device's fingerprint and we'll switch your license over. A device that's already activated online can't request a file directly: deactivate it in the app first, then come back here.

Moving to new hardware? An air-gapped machine can't release its own seat — in-app deactivation needs the network — and the designated offline device is fixed to your license. Email support@getcmmc.consulting and we'll free the seat and switch it over for you.

If the device later gets connectivity, everything behaves like a normal activation from then on — background license refresh, updates, and in-app deactivation all work.

Don't Have a License Yet?

Every license starts with a 14-day free trial — you won't be charged until it ends. Check out, confirm your email, and your key arrives within minutes; the installers are on the download page.