Error_0xa04c002a - While Activating EDR Optimum trial on the KSC server which already had EDR NFR licenses which Expired recently

[Nobody2025]

Hi everyone,

I'm experiencing an activation issue with a fresh Kaspersky Next EDR Optimum trial.

Environment:

• Kaspersky Security Center: 15.1.0.22239
• Kaspersky Endpoint Security for Windows: 14.0.0.504
• Network Agent: 15.1.0.2239
• OS: Windows Server 2019
• License: Kaspersky Next EDR Optimum Trial (100 devices)

Issue:

• The trial license imports successfully into KSC.
• The Add key task fails with Error 0xA04C002A.
• On the endpoint, avp.com LICENSE /CHECK returns "No licenses installed".

• Direct activation using:

  avp.com LICENSE /ADD <activation-code>

  also fails with 0xA04C002A.

Troubleshooting already completed:

• Internet connectivity verified.
• DNS resolution works.
• activation.kaspersky.com is reachable on TCP 443.
• Network Agent is connected and communicating with KSC.
• KES is detected and managed by KSC.
• KSC accepts the trial license, but it is never applied to the endpoint.

Has anyone encountered 0xA04C002A with a Kaspersky Next EDR Optimum trial, or is this a known licensing/entitlement issue?

Any suggestions would be appreciated.

 

 

 

- Thank you for your Help.

[Nobody2025]

+ Update 

I had same issue with another KSC server, but the license there is NFR and added a task to add key which took very long time, but the license as been applied.

If there are anyone from Kaspersky, could you tell me that if this is something in place to avoid people using trail license on expired licenses, so I wouldn't try anything and would build a new KSC.

 

- Thanks in advance for your inputs.

[Nobody2025]

+ Update

I enabled traces and tried to find if I could find something.

I could see below from logs, 

ERR lic.conv Unknown saas tier:0
ERR FacadeImpl::CheckActiveLicenseApplicability check failed: 0xa04c002a

Unknown saas tier:0 - I am not able to find information about this.

I am not sure if I could reachout to Kaspersky support, as there is a process with them is time consuming and they never troubleshoot online or over a remote session.

- Thank you for your assistance.

[Tahmeed702]

Hi Nobody2025,

I came across your post and believe I can explain what's happening and how to resolve it.

---

🔍 Root Cause

The log entries you shared tell the full story:

ERR lic.conv Unknown saas tier:0
ERR FacadeImpl::CheckActiveLicenseApplicability check failed: 0xa04c002a

The "saas tier:0" means KSC cannot identify a valid license tier for the endpoint. This happens because the expired NFR license left residual tier metadata in KSC's database. When the new Trial license is pushed, the CheckActiveLicenseApplicability function compares it against this unknown tier state and fails — resulting in 0xA04C002A.

This also explains why your other KSC (with an active NFR) worked fine — the tier was still properly registered there.

---

✅ Recommended Fix — Step by Step

Step 1 — Delete the Expired NFR Key from KSC
Go to: KSC Console → Operations → Licensing → Kaspersky Licenses
Locate the expired NFR key → Right-click → Delete
If deletion is blocked, first remove it from the active group policy/task.

Step 2 — Remove the License from the Endpoint
Either via a KSC "Remove key" group task, or directly on the endpoint:
  avp.com LICENSE /DEL <expired-key-code>

Step 3 — Restart KSC Services (Clears cached tier state)

Step 4 — Re-push the Trial License via KSC
Create or re-run the "Add key" task targeting the endpoint.
Since the license already shows as imported and active on 1 device in KSC, the issue is at the endpoint application level — the task just needs a clean slate to apply.

Step 5 — If Still Failing, Try Direct Activation on Endpoint
RDP into the endpoint and run:
  avp.com LICENSE /ADD <your-trial-activation-code>
If this also fails, clear any lingering key first:
  avp.com LICENSE /DEL
Then retry the /ADD command.

Step 6 — Verify KES Plugin in KSC
Go to KSC Console → Kaspersky Lab plugins and confirm the plugin for KES 14.0 is properly installed. A missing or outdated plugin can prevent proper license tier validation for the endpoint.
 

I have a question on your work, how did you get the trial , is it trial or NFR

Regards

Ahnaf Tahmeed 

[Nobody2025]

Dear Ahnaf Tahmeed,

First I got NFR kit through local channel, and it got expired last month, I am in pursuit to get the NFR kit from them again.

I have a customer who is facing some issues, so I wanted to try out few things so I got trial licenses from online to test few things and I am now trying to troubleshoot this.

-Thank you for your Assistance, really appreciate it.

 

 

[Tahmeed702]

On 6/27/2026 at 3:55 AM, Nobody2025 said:

Dear Ahnaf Tahmeed,

First I got NFR kit through local channel, and it got expired last month, I am in pursuit to get the NFR kit from them again.

I have a customer who is facing some issues, so I wanted to try out few things so I got trial licenses from online to test few things and I am now trying to troubleshoot this.

-Thank you for your Assistance, really appreciate it.

 

 

Don't use trial license, use NFR license for KSC