In an offline scenario, the appliance cannot "phone home." Therefore, the authorization loop must be closed manually. The Offline License File (often an .lic or .key file, though Kerio often uses specific binary formats) acts as a signed certificate that says, "GFI confirms that Hardware ID X is authorized to run Feature Set Y until Date Z."

With the release of Kerio Control v10 and later, GFI has streamlined the UI but maintained robust support for offline modes. Notably, v10 introduced a "Hybrid Mode" where the firewall attempts online activation every hour; if it fails x times, it falls back to an imported offline grace period. However, for pure offline, the process remains unchanged.

Here is the exact workflow to generate your .