How to activate Windows XP online in 2018

[Zephyr]

The Microsoft activation servers no longer support TLS 1.0 encryption so that with standard XP installations it is no longer possible to activate online and you have to use the Microsoft automated telephone activation service which is a time consuming pain in the ass. However Internet Explorer can be updated using updates intended for the POSREADY 2009 OS so that it can support the newer TLS 1.1 and TLS 1.2 protocols and thus enable activation over the internet.

First modify the registry so that Automatic Update is set to retrieve updates for POSREADY 2009

Code: Select all

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WindowsEmbedded\ProductVersion]
"FeaturePackVersion"="SP3"

[HKEY_LOCAL_MACHINE\SYSTEM\WPA\WEPOS]
"Installed"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\WPA\WES]
"Installed"=dword:00000000

[HKEY_LOCAL_MACHINE\SYSTEM\WPA\PosReady]
"Installed"=dword:00000001

Copy and paste into a text editor and save with .reg file ending. Execute to add new values to registry.

To add TLS 1.1 and TLS 1.2 support to XP obtain kb4019276 from the Microsoft Update Catalogue and install and reboot. To activate make the following modifications to the registry:

Code: Select all

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Client]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.1\Server]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Client]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL\Protocols\TLS 1.2\Server]
"DisabledByDefault"=dword:00000000
"Enabled"=dword:00000001

TLS 1.1 and TLS 1.2 support to Internet Explorer 8 was introduced with the Cumulative Security Update for Internet Explorer 8 for WES09 and POSReady 2009 (KB4316682) and all subsequent cumulative security updates including KB4230450, KB4339093, KB4343205, and KB4457426. To display tick boxes for TLS 1.1 and TLS 1.2 in advanced options in IE8 make the following registry modifications:

Code: Select all

Windows Registry Editor Version 5.00
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\TLS1.1]
"OSVersion"="3.5.1.0.0"
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\AdvancedOptions\CRYPTO\TLS1.2]
"OSVersion"="3.5.1.0.0" 

In IE8 open Tools>Options>Advanced and scroll down to the Security Section and uncheck both "Check for publisher's certificate revocation", and "Check for server certificate revocation".

After a reboot it should be possible to start the activation wizard and either change the product key by choosing the activate by telephone option and change product key from there before activating online or directly activate online if the product key was entered during installation.

This may seem like a palaver compared to automated telephone activation, but much of the effort can be minimized by incorporating the necessary updates and registry modifications into a custom installation CD for unattended installation.

[dencorso]

Warning! For the POSReady2009 hack, delete from that .reg file the following lines:

Code: Select all

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WindowsEmbedded\ProductVersion]
"FeaturePackVersion"="SP3"

They don't work anymore, and actually nowadays prevent MU/WU from working. Except for that, I second the suggestions in the post above this.

However, if all you want is to activate, do it by phone... it's automated and just works!