Nessus Offline Activation License Already In Use //free\\
Troubleshooting "Nessus License Already in Use" During Offline Activation "license already in use"
typically occurs when your Nessus activation code is still bound to a previous installation or a different hostname. Because Tenable Nessus
licenses are unique to a specific "challenge code" generated by the host machine, you cannot simply reuse the same activation code on a new system without first unlinking it from the old one. Why This Error Occurs
Nessus Professional licenses are designed to be active on only one scanner at a time. Common triggers for this error include: Hardware/VM Changes
: Moving Nessus to a new virtual machine or changing hardware generates a new challenge code, which the registration server sees as a different device. Improper Deactivation
: Reinstalling the OS or deleting a Nessus instance without first deactivating the license leaves the code "locked" to the old instance. Hostname Changes
: In some configurations, changing the system's hostname can invalidate the current binding. How to Resolve the Error 1. Reset the Activation Code (The Most Common Fix)
If you no longer have access to the original installation to deactivate it, you must reset the code through the Tenable Support Portal : Log in to the Tenable Community or Support Portal. : Navigate to "Manage Nessus Activation Codes" : Locate your activation code and click the
: This frees the license so it can be paired with your new offline challenge code. E-SPIN Group 2. Deactivate via Command Line (If you have access)
If the old scanner is still reachable, you can manually unregister it to free up the license immediately. # /opt/nessus/sbin/nessuscli fix --reset C:\Program Files\Tenable\Nessus\nessuscli.exe fix --reset
This command erases the registration information and clears the local configuration. 3. Complete the Offline Activation Process
Once the code is reset, follow the standard offline registration steps to generate a new license file: Update License Offline (Tenable Nessus 10.11)
Troubleshooting the "Nessus Offline Activation License Already in Use" error can be frustrating, especially when you are working in a secure, air-gapped environment. This specific error typically triggers when the Nessus activation code is already linked to a specific Challenge Code or Host ID in the Tenable system.
Because offline licenses are manually tied to a unique hardware fingerprint, any change in your system configuration or a previous failed installation can block a new activation attempt.
Here is a comprehensive guide on why this happens and how to fix it. Why You See the "License Already in Use" Error nessus offline activation license already in use
When you perform an offline activation, you generate a "Challenge Code" from your local Nessus scanner. You then provide this code and your "Activation Code" to the Tenable website to receive a license file (nessus.license).
The error occurs because Tenable's license server believes the code is currently active on another machine. Common causes include:
Reinstallations: You uninstalled Nessus and tried to reinstall it on the same machine, but the server didn't "release" the old hardware ID.
Hardware Changes: If you changed the network interface card (NIC), CPU, or hostname, the Challenge Code changes, making Tenable think it's a new device.
Virtual Machine Shifts: Moving a Nessus VM to a new host often changes the hardware UUID, triggering a license mismatch. Step 1: Reset the Activation Code
The most direct way to resolve this is to reset your license through the Tenable Support Portal or the Tenable Community site. Log in to your Tenable Portals account. Navigate to the Products or Licenses section.
Locate the Nessus activation code that is giving you trouble. Look for a "Reset" or "Unlink" button next to the license.
Confirm the reset. This frees the code to be paired with a new Challenge Code.
💡 Note: Tenable limits how many times you can reset a code manually (usually once every 24 hours). If you have exceeded this limit, you must contact Tenable Support to request a manual reset. Step 2: Generate a New Challenge Code
Once the license is reset on the Tenable side, you need to get a fresh Challenge Code from your offline scanner to ensure you aren't using cached, stale data.
For Linux:Open your terminal and run:/opt/nessus/sbin/nessuscli fetch --challenge
For Windows:Open an Administrator Command Prompt and run:C:\Program Files\Tenable\Nessus\nessuscli.exe fetch --challenge Keep this new string of characters handy for the next step. Step 3: Perform the Offline Activation Again
With a reset license and a new Challenge Code, you can now generate the license file. Go to the Tenable Offline Activation page. Enter your Activation Code (the one you just reset). Paste your New Challenge Code. Click Submit and download the nessus.license file. Copy this file to your offline machine. Step 4: Apply the License and Plugins
On your offline scanner, apply the license using the command line: Are you reusing a license on a new machine
Linux:/opt/nessus/sbin/nessuscli fetch --register-offline nessus.license
Windows:nessuscli.exe fetch --register-offline nessus.license
After the license is accepted, remember that you will also need to manually download and install the latest plugin set (all-2.0.tar.gz) since the machine has no internet access to pull them automatically. Pro-Tips for Avoiding Future License Issues
Unregister Before Moving: If you know you are going to decommission a server or move a VM, run nessuscli fix --reset first to try and release the binding.
Static MAC Addresses: If running Nessus in a VM, set a static MAC address. If the MAC address changes, the Challenge Code changes, and your license will break.
Documentation: Keep a record of which Challenge Code is paired with which Activation Code, especially if you manage multiple offline scanners.
If you followed these steps and still receive the "Already in Use" error, it usually indicates a backend sync issue at Tenable. In this case, providing your Activation Code and the new Challenge Code to a Tenable Support ticket is the fastest path to resolution.
The "Activation Code already in use" error occurs because a Tenable Nessus activation code can only be bound to a single host at a time. If you are performing an offline activation and encounter this, you must first reset the code in the Tenable portal to unbind it from its previous installation before it can be used on a new one. Primary Solution: Reset Activation Code
If your license is already tied to another machine (or a previous installation on the same machine), you must reset it via the Tenable Community Support Portal.
Log in: Access the Tenable Community Portal from an internet-connected device.
Navigate to Products: Click My Products in the upper right corner.
Find the License: Select your product type (e.g., Nessus Professional) and click Manage Product next to the specific license. Perform Reset: Click the Reset Product Activation link.
Note: Only the Primary Contact or assigned Product Owner has permission to perform this reset.
Limitation: Tenable limits how frequently a code can be reset this way; if you exceed this, you must Contact Tenable Support. Step-by-Step Offline Activation Process Did your host hardware/OS change significantly
Once the code is reset, follow these steps to activate your offline scanner:
Generate a Challenge Code: On the offline Nessus host, run the following command to get your unique challenge string: Linux: /opt/nessus/sbin/nessuscli fetch --challenge
Windows: C:\Program Files\Tenable\Nessus\nessuscli.exe fetch --challenge
Get the License File: On an internet-connected machine, go to the Nessus Offline Registration Page. Enter your Challenge Code and your Activation Code. Download the resulting nessus.license file.
Apply the License: Transfer the nessus.license file to the offline machine and register it using the command line:
Linux: /opt/nessus/sbin/nessuscli fetch --register-offline nessus.license
Windows: nessuscli.exe fetch --register-offline nessus.license Troubleshooting Tips
Verification: You can check which activation code is currently "in use" on a local machine by running nessuscli fetch --code-in-use.
Existing Installations: If you still have access to the "old" machine, you can try deactivating it directly using nessuscli fetch --deactivate to free up the license.
Full Reset: If the local installation is corrupted, use nessuscli fix --reset to clear local registration settings before trying the activation again. Update License Offline (Tenable Nessus 10.12)
Quick Checks First:
-
Are you reusing a license on a new machine?
Nessus Professional licenses are typically node-locked. You can’t activate the same license on two different hosts without deactivating the first one. -
Did your host hardware/OS change significantly?
Changes to the network adapter, MAC address, or hostname can make Nessus see the same machine as a “new” one.
1. Never Clone a Licensed Nessus Scanner
Always build new scanners from a clean OS template. Cloning preserves the system UUID. If you must use templates, ensure your automation script runs nessuscli reset and changes the MAC address post-clone.
Understanding Nessus Offline Activation
Nessus offers both online and offline activation options. Offline activation is particularly useful for Nessus installations that do not have direct internet access. It involves obtaining an activation code from the Nessus website, which is then applied to the Nessus scanner.
Fix C: Forcing a License Override (Expert Level)
If deactivation is impossible (e.g., support is slow and the old server is gone), you can attempt to force Tenable to accept the new hardware using the --set-offline parameter.
- Download a trial license or a temporary license from Tenable using your same account.
- Install the temp license.
- Immediately run:
nessuscli fetch --register-offline <your_new_activation_code>
- This sometimes forces a "re-bind" because the system sees your current challenge code as active with a temp license and swaps it for the permanent one.
Warning: Fix C has a low success rate. Usually, only Tenable support can fully unbind a license.
