Windows 7 RTM was released few days ago and there was time until the RTM version would be out on MSDN/TechNet on August 6th but crackers have cracked the Windows 7 Ultimate and activated with a OEM Master key with help from a leaked Lenovo OEM DVD .ISO file.

It can be permanently activated with OEM style instant offline activation which will pass Windows Genuine Advantage (WGA) validation, before even any Windows 7 is officially released.It happened when a Windows 7 Ultimate OEM DVD ISO from Lenovo was leaked and was posted on Chinese forum. The ISO was quickly grabbed to retrieve boot.wim, which was then used to retrieve the OEM-SLP product key and OEM certificate for Windows 7 Ultimate plus the OEM activation certificate.

Microsoft has updated the the SLP (System-Locked Preinstallation), a procedure that used to preactivate Windows operating system for mass distribution by major OEM (original equipment manufacturers), to version 2.1 to support Windows 7 and Windows Server 2008 R2 while provided backward-compatibility for Windows Vista and Windows Server 2008 activation. Windows Vista and Windows Server 2008 OEM activation is provided by SLP 2.0. SLP 2.1 requires SLIC imprinted in BIOS to be updated to SLIC version 2.1 too, which contains new Windows Marker.

Microsoft uses the same digitally signed OEM certificate, which has an .xrm-ms extension, as that in Windows Vista.As OEM certificate is digitally signed by Microsoft with its own Private Key with OEM Public Key and OEMID (part of SLIC table in BIOS). The combination of correct Private Key, Public Key with OEMID will pass SLP validation as valid Microsoft license. Meanwhile, Windows Marker is signed by OEM itself based on OEMID and OEMTableID (both belongs to SLIC) using the private key that matches the public key.

Thus,the same OEM cert can be used for many different SLICs, as long as OEMID remains the same, as in the case of SLP 2.0 and SLP 2.1, although Windows Marker has changed due to different OEMTableID.So far no OEM-SLP product key required to activate Windows 7 as OEM offline instant activation been leaked yet as no machine has been officially ship in Windows 7 by OEM.

The extracted Windows 7 Ultimate OEM-SLP product key, 22TKD-F8XX6-YG69F-9M66D-PMJBM, can be used to activate installed Windows 7 Ultimate system, which BIOS has a valid OEM SLIC 2.1, and corresponding OEM cert, even if it’s OEM cert meant for Windows Vista.Another point to note is that the key is a master one, which can be used to activate other OEM branded installations, like ones from Dell, HP or indeed Lenovo.Long Zheng posted a screenie of it showing activated Windows 85 days before the release of Windows 7.

So Microsoft need to take care of this on a serious note to fix the WGA fix so that they can stop such fixes to come every now and then.Lets see what Microsoft has to say about this leak.Will update once i get info.

Via

The author/Admin is a Software engineer and currently pursuing his MBA.His interests include blogging anything about technology,music dance and bike racing.