Cannot Contact License Server
When an end-user encounters a “Cannot contact license server” error, it typically means the application is unable to establish a secure connection with KEYZY’s API to validate the license. This is often due to local network restrictions, security software, or system configurations.
Start Here: Check Your Client Library Version
Most network reports we receive come from applications built with a client library older than 1.9.0. Those versions report every network problem as a single CONNECTION_ERROR, which leaves both you and us guessing. From 1.9.0 onwards, a failed call returns a status that names the cause — and rebuilding also picks up every networking improvement released since your current version.
Before investigating anything else:
- Download the latest C++ Client Library and rebuild your application.
- Add cases for the network statuses listed in the C++ License Status Codes reference. The change is additive — your existing
switch (status)code keeps compiling and behaving exactly as before. - Send the affected customer a new build.
The next failed attempt will then tell you which of the cases below you are dealing with, instead of a generic error.
Reading the Status
Once your build returns a specific status, use it to go straight to the right check:
| Status | What it usually means | Where to look |
|---|---|---|
NETWORK_DNS_FAILED | No internet connection, or DNS blocked on that network | Internet Connectivity |
NETWORK_REFUSED | Firewall or antivirus blocking outbound HTTPS | Firewall & Antivirus Allowlisting |
NETWORK_TIMEOUT | Firewall, or a proxy silently dropping the connection | Firewall & Antivirus Allowlisting, Corporate Network Restrictions |
NETWORK_PROXY_REQUIRED | The network requires an authenticated proxy | Corporate Network Restrictions |
NETWORK_TLS_FAILED | Security software inspecting HTTPS traffic, or a wrong system clock on the device | Firewall & Antivirus Allowlisting, and the SSL note under How to Analyze the Output |
NETWORK_HOSTS_TAMPERED | api.keyzy.io resolves to a local address on that machine | The hosts file note under How to Analyze the Output |
CONNECTION_ERROR | The build is older than 1.9.0, or the cause is not one of the above | Work through the whole page |
Standard Troubleshooting
Before diving into logs, please verify the following common causes:
- Internet Connectivity: Ensure the device has an active and stable internet connection.
- Firewall & Antivirus Allowlisting: Security software (Windows Defender, 3rd party Antivirus, or Firewalls) may mistakenly block the connection. Ensure that the software has permission to make outbound connections or that
api.keyzy.iois whitelisted on port 443. - Corporate Network Restrictions: If the user is on a corporate or restricted network (e.g., office, university, or VPN), the network administrator may need to explicitly allow access to the
keyzy.iodomain. - Hardware ID Consistency: Confirm that the user is not running MAC address spoofing software. KEYZY relies on hardware identifiers, and spoofing tools can disrupt the validation process.
Advanced Troubleshooting: Diagnosing Network Issues
If the issue persists — or if the application is an older build that only reports CONNECTION_ERROR — you may need to investigate the specific network response to pinpoint the failure (e.g., DNS resolution failure, SSL handshake blocking, or firewall termination).
Ask your customer to run the following diagnostic command:
For macOS and Linux Users
- Open the Terminal app
- Copy and paste the following command and press Enter:
curl -v https://api.keyzy.io/v2/status-check
- Copy the entire text output and send it to the support team.
For Windows Users
- Press the Windows Key, type cmd, and select Command Prompt (do not use PowerShell)
- Copy and paste the following command and press Enter:
curl -v https://api.keyzy.io/v2/status-check
- Take a screenshot of the result or copy the text and send it to the support team.
How to Analyze the Output
Once you receive the output from your customer, look for the following clues:
-
Trying 127.0.0.1...orTrying ::1...— The domain is being redirected to localhost instead of KEYZY’s servers. This is almost always caused by an entry in the user’s hosts file. Ask the user to check their hosts file (/etc/hostson macOS/Linux orC:\Windows\System32\drivers\etc\hostson Windows) and remove any lines referencingkeyzy.io. -
Could not resolve host— This indicates a DNS issue. The user may need to check their internet connection or try changing their DNS settings (e.g., to Google DNS8.8.8.8). -
Connect to ... timed out— This usually indicates that a Firewall or Proxy is strictly blocking the outgoing connection. The user needs to whitelistapi.keyzy.ioor allow HTTPS traffic on port 443. -
SSL certificate problem— The user might be behind a corporate proxy or antivirus software that performs SSL inspection (Man-in-the-Middle). A wrong system date or time on the device produces the same failure. -
HTTP/1.1 200 OK— If you see this, the network connection to KEYZY is healthy. The issue likely lies within the application integration or local configuration rather than the network.