Cart, items:0

Windows · fix · 7 min read

0x87E10BC6 Activation Error: How to Fix It on Windows 11 and 10

Published

Short answer: The 0x87E10BC6 activation error shows that Windows couldn't finish talking to Microsoft's activation or licensing service. The connection or the service is at fault, not usually your key. Wait a few minutes. Turn off VPN, proxy and blocking tools. I'd correct the clock, then run the Activation troubleshooter again.

The 0x87E10BC6 activation error has a plain cause. Windows reached the activation step but couldn’t finish the conversation with Microsoft’s activation or licensing service.

It appears on Windows 11 and on Windows 10 alike. In most cases the fix is simple.

  • Wait a few minutes.
  • Check that nothing blocks the connection: a VPN, a proxy, a firewall or a hosts file.
  • Run the Activation troubleshooter or the activation command again.

The full message usually reads: “Something prevented us from communicating with our activation servers. Wait a few minutes and then try again.”

Note what it doesn’t say. There’s nothing about a bad key, and nothing about a used key.

That detail matters, because a key problem has its own codes. Treating this one like a key problem usually wastes an afternoon.

Codes that do point to the key
0xC004C060
0xC004C008
0xC004F050
Point Detail
Microsoft’s description “An error occurred with our activation server or licensing service”: a communication or service problem, not a verdict on your key
First step Waiting and retrying is Microsoft’s own first step. Temporary service hiccups clear with nothing touched on your PC
When it keeps coming back The cause is typically on the path between your PC and Microsoft: VPN, proxy, firewall rules, a privacy tool that edited the hosts file, or a wrong clock
Fixes The Activation troubleshooter and the Microsoft Store retry are the official ones. slmgr /ato and slmgr /dlv show you what really happens
Windows Server Leftover KMS settings (for example after removing the Volume Activation Services role) can trigger the same code. slmgr /ckms clears them

What 0x87E10BC6 stands for

Windows couldn’t complete activation because something went wrong while talking to Microsoft’s activation server or licensing service.

Microsoft’s own list of activation codes describes it that way. It recommends three things.

  • Waiting a few minutes
  • Running the Activation troubleshooter
  • Retrying through the Microsoft Store

The product key itself is usually fine.

Think of activation as a short online exchange. Windows sends the key, or the hardware ID behind a digital license, to Microsoft.

The service answers with a license. With this code, that answer never arrives in a usable form.

Sometimes the service is busy. More often the request is stopped or altered on the way out of your network.

Microsoft lists the code on its Get help with Windows activation errors page for both client systems.

The same hexadecimal code also shows up outside activation. Microsoft Store apps or Xbox games can fail to launch with it.

Those cases share the licensing plumbing, since the Store hands out app licenses through the same services. That’s why some forum fixes for games look so similar.

Here the focus is the activation screen under Settings, System, Activation.

Causes

Ranked by how often each turns out to be the real reason, the list looks roughly like this.

Cause Detail
Service-side hiccup Short outages happen. Microsoft’s guidance for this code starts with “wait a few minutes”, and that alone clears a good share of cases
VPN, proxy or SSL inspection Corporate proxies that demand authentication, or filters that decrypt HTTPS traffic, often break the licensing handshake. Consumer VPNs sometimes do the same
Blocked addresses Privacy and “debloat” scripts commonly add Microsoft domains to the hosts file or to firewall rules. Activation and licensing hosts (for instance the ones under sls.microsoft.com and licensing.mp.microsoft.com) can end up on that list by accident
Clock and time zone A date that is far off breaks the secure connection before activation even starts
Licensing services The Client License Service (ClipSVC) and the Windows License Manager Service handle Store licenses and digital licenses. If they are disabled, the request has nowhere to go
Server-specific KMS leftovers A server that once had the Volume Activation Services role, or a manually set KMS host, may keep pointing at a host that no longer answers

The hosts file sits at this path:

C:\Windows\System32\drivers\etc\hosts

How to fix the 0x87E10BC6 activation error

Work from the least invasive step to the most. Most PCs activate before the last one.

  1. Wait 10 to 15 minutes. Then open Settings, System, Activation and select Activate, and restart once if the button does nothing.
  2. Disconnect any VPN and turn off proxy settings under Settings, Network & internet, Proxy. Pause third-party firewall or web-filtering software for the test.
  3. Check date, time and time zone under Settings, Time & language, Date & time. Turn on Set time automatically and select Sync now.
  4. Open the hosts file in Notepad as administrator. Remove or comment out lines that point Microsoft domains to 0.0.0.0 or 127.0.0.1, then save and flush DNS.
  5. Run the Activation troubleshooter with the Troubleshoot button on the Activation page. The option appears only for an administrator.
  6. If “Go to Microsoft Store” is offered, open it. When the Store reports a problem, choose Try again and wait for the confirmation.
  7. Open Command Prompt as administrator and run the activation line below. A message box reports success or the exact code.
  8. If it still fails, reinstall your own 25-character key and activate again. Skip this with a digital license and no key.
  9. Read the “License Status” and “Notification Reason” lines in the detailed view to confirm the result.
ipconfig /flushdns
slmgr /ato
slmgr /ipk XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
slmgr /dlv
Line What it does
ipconfig /flushdns Clears the DNS cache after a hosts file edit
slmgr /ato Forces online activation
slmgr /ipk Reinstalls your key
slmgr /dlv Shows the detailed license view

On Windows 10 the Activation page sits under Settings, Update & Security, Activation.

On a work laptop, try a network with no corporate proxy, if your IT policy permits.

The Store retry is the step Microsoft recommends for this code.

I’d run the activation line right after turning the VPN off or editing the hosts file. If it succeeds immediately, you’ve found the culprit. Then you know exactly what to add as an exception before switching that tool back on.

Matching the fix to the cause

Match the symptom to the cause before you touch anything.

  • A failure on only one network points to a proxy or firewall.
  • A failure right after a privacy tool ran points to the hosts file.
  • A failure on every network for an hour or two typically comes from a temporary service issue.
Cause How you recognise it Fix
Temporary problem on Microsoft’s activation or licensing service Fails on any network, other settings look normal Wait, then select Activate or run slmgr /ato again
VPN or proxy in the way Works on a phone hotspot, fails on the office or VPN connection Disconnect the VPN, remove the proxy, or ask IT to exempt Microsoft licensing traffic from authentication and SSL inspection
Hosts file or firewall rule from a privacy tool The code started after a debloat or anti-telemetry script Remove Microsoft entries from the hosts file, reset the tool’s firewall rules, ipconfig /flushdns
Wrong date, time or time zone The clock is off; HTTPS sites may also show certificate warnings Set time automatically, Sync now
Licensing services disabled ClipSVC or License Manager set to Disabled Set them back to Manual (Trigger Start) and restart
Leftover KMS host on Windows Server slmgr /dlv shows a KMS machine name or volume channel slmgr /ckms, then slmgr /ato (or slmgr /ipk with the right key first)

Microsoft’s servers or your PC

Often it’s neither in the strict sense. The PC and the key are fine, and so is Microsoft’s service.

Something in between breaks the exchange. A real service-side problem tends to clear within hours with nothing touched.

If the code survives a day and several networks, look at your own machine: hosts file, security software, clock and services.

There’s a quick way to split the two. Connect the PC to a phone hotspot, with VPN and filtering software off, and press Activate.

If it works, your usual network is the issue, not Windows. If it still fails, move on to the services and the command line.

The overview of Windows 11 activation errors lists the related codes. A message that differs after one of these steps is itself useful information.

The licensing services

Service Job Default startup type
Software Protection (sppsvc) Activation Automatic (Delayed Start)
Client License Service (ClipSVC) Digital and Store licenses Manual (Trigger Start)
Windows License Manager Service Digital and Store licenses Manual (Trigger Start)

All of them start on demand. If a tuning page set any of them to Disabled, activation can fail with communication codes like this one.

So restore the default startup type. Open PowerShell as administrator and check their state:

Get-Service sppsvc, ClipSVC, LicenseManager | Format-Table Name, Status, StartType

A status of Stopped is normal, because these services start when needed. Disabled is not normal.

Some of these services are protected, so a few tools set them through the registry. If services.msc refuses your edit, I’d undo it with the tool that made it.

A restore point from before the tweak works too.

Forums often suggest resetting the Store cache with wsreset.exe. It’s harmless and sometimes helps when the Store step keeps failing. I wouldn’t count on it to repair activation by itself.

On Windows Server

On server systems the code typically has one of two causes.

  • The server can’t reach Microsoft’s activation endpoints through a restrictive firewall or proxy.
  • It still points to a KMS host.

Administrators on Microsoft’s own forum report it after adding and then removing the Volume Activation Services role. That was on Windows Server 2022.

slmgr /dlv
slmgr /ckms
slmgr /ipk XXXXX-XXXXX-XXXXX-XXXXX-XXXXX
slmgr /ato
Step Line
Start with the detailed view slmgr /dlv
If it shows a “KMS machine name” you no longer use, clear it slmgr /ckms
Install the correct key for the edition slmgr /ipk
Activate slmgr /ato

An evaluation build needs an edition conversion first. Our page on activating Windows Server with DISM covers the two DISM lines for that.

DISM line Purpose
DISM /Online /Get-TargetEditions Lists the editions you can convert to
DISM /Online /Set-Edition Converts the edition, after which a retail key sticks

Event Viewer helps too. The Application log under Windows Logs records Security-SPP events with the reason for each attempt.

Servers on isolated networks need their own plan. If outbound HTTPS to Microsoft isn’t permitted at all, online activation can’t work.

The honest options are these.

  • A firewall exception
  • A KMS host inside the network
  • Phone activation, where your license type allows it

Could the product key be the problem

Rarely. Microsoft reserves other codes for invalid, blocked or overused keys.

Say you fix the connection and the code turns into 0xC004C003, 0xC004C060 or 0xC004C008. Then the communication works, and the key is the issue.

That’s progress, and it tells you exactly which page to read next.

For example, 0xC004F074 points to a KMS host that couldn’t be reached. That situation is related but different.

The step-by-step Windows 10 activation guide explains how keys, digital licenses and Microsoft accounts fit together.

If the key turns out blocked or was never genuine, only a valid license fixes that for good.

Need a key? Our Windows 11 Pro key comes as a genuine license. We email it instantly after payment.

What to avoid

Avoid “activator” tools, KMS emulators and random scripts from video comments. They don’t fix this code.

They often add the very hosts entries and service tweaks that cause it, and they may install malware.

Also skip registry edits you can’t undo, and full Windows resets. Neither is needed for a communication problem like this one.

Two smaller traps deserve a line each. Reinstalling the same key ten times does nothing while the connection is blocked.

And don’t switch the edition through DISM on a home PC just to see if it helps.

That typically creates a real key mismatch on top of the original problem.

Where these steps apply

System What applies
Windows 11 Home and Pro, versions 23H2, 24H2 and 25H2 All steps
Windows 10 Home and Pro 22H2 All steps, with the Update & Security → Activation path
Windows Server 2019, 2022 and 2025 with Desktop Experience The slmgr, slmgr /ckms, DISM and Event Viewer steps. The Microsoft Store step does not apply

Enterprise editions of the client systems follow the same steps. Menu paths are written for Windows 11, with Windows 10 names where they differ.

Mistakes we see most

  • Treating the code as a key problem and buying a second key.
  • Retrying over the same VPN again and again.
  • Forgetting a hosts file that a privacy script edited months ago.
  • Leaving the clock wrong.
  • Disabling licensing services to “speed up” the PC.
  • Reinstalling the same key ten times.
  • Using an activator tool.
  • Resetting Windows for a communication problem.
  • Leaving a stale KMS host set on a server.

Terms used on this page

Term Meaning
Activation service Microsoft’s servers that answer an activation request
Licensing service The service that issues digital and Store licenses
Digital license An activation Microsoft stores against your hardware ID
Hosts file A local file that can redirect or block domain names
Proxy A server that sits between your PC and the internet
SSL inspection A filter that decrypts HTTPS traffic to scan it
ClipSVC The Client License Service
sppsvc The Software Protection service behind activation
KMS host A server on a company network that activates volume-licensed machines
Activation troubleshooter The tool behind the Troubleshoot button on the Activation page
slmgr The built-in script for license commands
Security-SPP The event source that logs activation attempts

A few cases from support

The office proxy

A laptop activates on a phone hotspot and fails at the office. The proxy there asks for authentication. IT exempts the licensing traffic, and activation works.

The privacy script

The code starts after a debloat script. The hosts file sends licensing domains to 0.0.0.0. With those lines removed, activation goes through.

The patient fix

Activation fails on every network one evening. Nothing gets edited. The next morning the PC is activated.

The server and its old host

One 2022 server keeps the code after a role was removed. A stale KMS host is still set. Clearing it lets the key activate.

The disabled service

Some tuning tool has set ClipSVC to Disabled. Activation fails until the default startup type is back.

FAQ

What does error code 0x87E10BC6 mean on Windows 11?

Windows couldn't complete activation because of a problem while talking to Microsoft's activation server or licensing service. Microsoft's message reads "Something prevented us from communicating with our activation servers". The key is usually valid, so I'd look at the connection or the service.

How do I fix 0x87E10BC6 quickly?

Wait 10 to 15 minutes and disconnect any VPN or proxy. Check that the date and time are set automatically. Then go to Settings, System, Activation and run Troubleshoot. If that doesn't help, I'd run the online activation command from an elevated Command Prompt.

Can a VPN or firewall cause the 0x87E10BC6 activation error?

Yes, and it's one of the most common reasons. VPNs, authenticating proxies, HTTPS inspection and security suites can block or alter the licensing request. I'd test activation on a phone hotspot with those tools off. If it works there, add an exception for Microsoft licensing traffic.

Is my Windows product key invalid if I get 0x87E10BC6?

Usually not. Invalid, blocked or overused keys produce other codes, such as 0xC004C003, 0xC004C060 or 0xC004C008. If one of those appears after you fix the connection, I'd turn to the key.

Why does 0x87E10BC6 appear on Windows Server 2022?

Typically the server can't reach Microsoft's activation endpoints through its firewall or proxy. Or it still points to an old KMS host. I'd read the detailed license view, clear a stale host, install the right key and activate again.

Will the error go away on its own?

Often yes, if the cause was temporary on Microsoft's side. Windows retries activation in the background. If it lasts more than a day, something on your PC or network is blocking the request. I wouldn't wait longer in that case.