DOMAIN COMMAND POSTMonitor. Manage. Discover. Protect.

Help Center / Windows License Manager

Administer the website from Windows without exposing MySQL.

Create a scoped token, connect the native manager, create customers, issue licenses, control pairings and publish releases.

Applies toAuthorized Domain Command Post administratorsTypical time10–25 minutesGuide formatPrepare → Click → Verify → Recover

Before you start

  • The website database upgrade is complete
  • PHP Sodium, OpenSSL, PDO MySQL and cURL are Ready under System & API
  • HTTPS is valid on the production website
  • You have a website administrator account

1. Create a least-privileged token

Website path: Admin → System & API → Scoped API tokens

  1. Name the administration computer.
  2. Select only the scopes needed. Read-only work does not need write, delete or publish scopes.
  3. Choose an expiration and select Create token.
  4. Copy the dcpadm_… value immediately; the website stores only its SHA-256 hash.

2. Connect the Windows License Manager

Program path: Connection → Website API

  1. Enter the HTTPS website base URL.
  2. Paste the API token and select Test connection.
  3. Compare the returned signing key ID with Admin → System & API.
  4. Select Save. On Windows, the token is protected with DPAPI for the current user.
Success looks like: the dashboard reports server time, signing key ID and counts without showing the token again.

If the saved token still tests as missing

  1. Confirm the website reports package 0.18.8 or newer.
  2. In cPanel File Manager enable Show Hidden Files and confirm the package's .htaccess is in the same document root as index.php.
  3. Use License Manager 1.0.1 or newer. It sends the standard Bearer header plus a protected cPanel/LiteSpeed compatibility header.
  4. Retest and read the exact result: admin_token_missing, invalid, revoked, expired and scope_denied identify different fixes.
Do not work around this by putting the token in a URL. URLs are commonly retained in browser, proxy and server logs.

3. Create a customer and issue a primary license

  1. Customers → New customer → enter name and email.
  2. Choose whether to send the 48-hour password-setup link.
  3. Licenses → Issue license → choose customer, edition, type, device limit, expiration and add-ons.
  4. Copy the product key from the one-time result and deliver it privately.

4. Issue Monitor Only

  1. Wait for the updated primary app to register its workspace.
  2. Workspaces → choose an Active, Multi Sync Eligible workspace.
  3. Issue Monitor Only and copy both the product key and pairing code.
  4. Edit the remote display policy before the station activates.

5. Revoke or delete safely

  1. Set a license to Revoked to deactivate computers and invalidate certificates.
  2. Verify zero active devices.
  3. Use permanent deletion only when the key should never be restored.
  4. Revoke an API token immediately if an administration computer or Windows account is no longer trusted.

6. Publish a release

Use Releases → Stage package. The manager uploads the binary first, compares the server SHA-256, then sends the manifest last. A mismatch stops publication and leaves no public release row.

Still stuck?

Write down the edition, program version, the exact path you opened, the last successful step and the full visible error. Do not send product keys, passwords or provider secrets.

Contact support with those detailsBack to Help Center