English

Nessus Offline Activation License Already In Use Hot! Full May 2026

If you see a "license already in use" error during Nessus offline activation, it means your activation code is currently linked to another machine’s hardware footprint. Because Tenable restricts an activation code to one active host at a time, you must "release" it before it can be used for a new offline registration. Phase 1: Resetting the Activation Code

You cannot resolve this from the offline scanner itself. You must use a device with internet access to unbind the license from the previous installation. Log in to the Tenable Support Portal or Tenable Community. Navigate to My Products or Products and Activation Codes. Locate your Nessus Professional or Expert license.

Click the Reset or Reset Product Activation link next to the code.

Note: There is a limit on how frequently you can perform this reset yourself. If the reset option is unavailable, you may need to contact Tenable Support. Phase 2: Generating a New Offline License

Once the code is reset, you can proceed with the offline registration process to generate a new nessus.license file. On the Offline Scanner: Generate a Challenge Code using the command line: Linux: # /opt/nessus/sbin/nessuscli fetch --challenge

Windows: C:\Program Files\Tenable\Nessus\nessuscli.exe fetch --challenge Copy the resulting alphanumeric string. On an Online Machine: Go to the Nessus Offline Registration Page. Enter your Challenge Code and your Activation Code. Click Submit. You will be provided with: nessus offline activation license already in use full

A Custom URL for downloading the plugin archive (Save this! It's shown only once). A nessus.license file. Phase 3: Finalizing Activation

Transfer the nessus.license file to your offline scanner and apply it.

Move the File: Copy nessus.license to the appropriate directory: Linux: /opt/nessus/etc/nessus/ Windows: C:\ProgramData\Tenable\Nessus\conf\ Run the Register Command:

Linux: # /opt/nessus/sbin/nessuscli fetch --register-offline nessus.license

Windows: nessuscli.exe fetch --register-offline "C:\path\to\nessus.license" Summary of Key Constraints If you see a "license already in use"

One Host Only: The license is bound to the specific challenge code of the machine. Moving the VM or changing hardware will trigger the "already in use" error again.

Permissions: Only the Primary Contact or Product Owner for the account can reset activation codes in the portal. Update License Offline (Tenable Nessus 10.11)

Best Practice 4 – Consider a Linked License for Air-Gapped Networks

Tenable offers Nessus Professional (Unlimited) licenses that are tied to a single offline scanner but allow unlimited scans. For large offline deployments, ask Tenable sales for a multi-activation license.

Option B: Deactivate from the Offline Machine (If accessible)

If the old machine is still running Nexus offline:

/opt/nessus/sbin/nessuscli fix --deactivate

This contacts Tenable’s servers (requires temporary internet or proxy). Not ideal for fully air-gapped. Best Practice 4 – Consider a Linked License

Q2: I deactivated old scanners, but offline activation still says "full." Why?

A: Tenable’s offline activation portal caches license usage for up to 1 hour. Wait 60 minutes, regenerate a new challenge file, and retry.

Step-by-Step Diagnosis

Before attempting any fix, perform the following diagnostic checks.

Solution 1: Deactivate the License via Tenable Support Portal (If Previously Activated Online)

If you have access to the original activated machine (even if offline), you need to release the license.

  1. On the machine where the license is currently active, run: 
    sudo /opt/nessus/sbin/nessuscli fetch --deactivate
  2. Wait for confirmation: "License successfully deactivated."
  3. On your new offline machine, generate a fresh challenge code: 
    sudo /opt/nessus/sbin/nessuscli fetch --challenge
  4. Use this new challenge in the offline activation portal.
  5. Apply the returned activation code. The error should resolve.

If the original machine is destroyed or inaccessible, you cannot deactivate it yourself. Proceed to Solution 2.