Error 403 or "Activation Error - Cannot connect to the Activation server\!" when running [activation tool|kb:Sentinel RMS 8.5 Utilities] a for [web-activated license|kb:Web-activated licensing] can be generated in a situation when the affected computer is behind a Proxy/Caching proxy or has proxy settings that are preventing direct access to CSI license activation server on ports 8080 and 8443.

{info}
The license activation server ports are 8080 and 8443. If either of these ports is blocked, they need to be opened, otherwise license activation will not be possible.
{info}

h1. Troubleshooting

To troubleshoot the error, the users should check if they have any Proxy settings or a "caching proxy server" that they are using and/or the Firewall they are using if they are not using any proxy server. This will help to determine if this is a network issue or if this is a computer issue.

If users have a Socks proxy server, such as IBM WebSphere Application server setup as a proxy server, they should check it has been set to only allow access to SSL port 443.

{hidden-content}
Related Incidents:

* {incident:no=50993|comment=Error 403 when using activation tool for web-activated license}
** {email:date=2/19/2013|from=dk|to=ok|subject=Error 403|comment=|id=10747977}

* {incident:no=51882|comment=Error 403 resolved by unblocking port}
** {email:date=3/8/2013|from=jt|to=ok|subject=Error 403 resolved by unblocking port|comment=|id=10747985}

* {email:date=4/2/2013|from=mw|to=ok|subject=Activation Error - Cannot connect to the Activation server!|comment=|id=10748489}
{hidden-content}

h1. External links

* [Extending the ISA Firewall’s SSL Tunnel Port Range (2004)|http://www.isaserver.org/articles/2004tunnelportrange.html]