Nessus Offline Registration Hot [updated] May 2026

Offline registration for Tenable Nessus is essential for securing air-gapped environments or systems with restricted internet access. The process requires a second computer with internet connectivity to bridge the gap between the offline scanner and Tenable's licensing servers. Prerequisites for Offline Activation

Activation Code: Obtained through your Tenable Community account or a trial registration.

Two Systems: The "Offline System" (A) where Nessus is installed, and the "Online System" (B) used to download licenses and plugins. Step 1: Generate the Challenge Code

To link your specific installation to a license, you must first generate a unique Challenge Code from the offline scanner.

Via Web UI: During the initial browser-based setup, select Register Offline on the "Welcome to Nessus" page to reveal the code. nessus offline registration hot

Via Command Line: If Nessus is already installed, run the following command to retrieve the challenge string: Linux: /opt/nessus/sbin/nessuscli fetch --challenge

Windows: "C:\Program Files\Tenable\Nessus\nessuscli.exe" fetch --challenge macOS: /Library/Nessus/run/sbin/nessuscli fetch --challenge Step 2: Generate the License File

Once you have the Challenge Code, move to the computer with internet access. Install Tenable Nessus Offline

Step 2: On an Internet-Connected Machine

Go to: https://zh-cn.tenable.com/products/nessus/nessus-essentials (or your license portal) Offline registration for Tenable Nessus is essential for

For Nessus Professional: Login at https://license.tenable.com
Enter your activation code and the challenge code from Step 1.
The portal generates a license file (.lic).

Alternatively, via command line (if you have Nessus CLI on online machine):

./nessuscli fetch --register-offline <ACTIVATION_CODE> --challenge <CHALLENGE_CODE>

Part 2: What You Need Before Starting Offline Registration

Before you execute any commands, ensure you have the following artifacts. Missing even one will break the offline registration process.

The Offline Installer: Download the Nessus .deb (Debian/Ubuntu), .rpm (RHEL/CentOS), or .msi (Windows) from Tenable's download portal on an internet-connected machine. Transfer it via USB or secure media.
A Valid Activation Code: This comes from your Tenable account. For Nessus Professional, it is a string of alphanumeric characters. For Nessus Expert, it includes cloud scanning features.
Challenge File Generator: The Nessus binary itself generates the challenge file. You do not need a separate tool.
A Secondary Internet Machine: You will need a browser on a connected device to visit https://plugins.nessus.org/v2/offline.php.

Critical Note: The "hot" part of this equation is timing. Challenge codes expire. If you generate a challenge and wait two hours to request a response, the plugin feed may have updated, invalidating your request.

Step 5 – Obtain license response from Tenable

On the online machine:

Go to Tenable’s offline registration portal:
https://plugins.nessus.org/offline.php
Upload the challenge file.
Provide your activation code again if prompted.
The portal returns a license file (e.g., nessus_license.lic).

Step 4 – Transfer challenge to an online machine

Copy the challenge file to an internet-connected computer (USB, secure network share, etc.).

1. The Rise of Air-Gapped Environments

With ransomware attacks targeting supply chains, many operational technology (OT) environments are being physically disconnected from the internet. Nessus is often the only tool allowed inside these perimeters. When a license expires or a new sensor needs deployment, admins cannot simply click "Update Online." They need a flawless offline workflow.

Step 3 – Generate a challenge file

Enter your activation code (provided by Tenable).
Click “Generate Challenge”.
Nessus creates a file, typically named nessus_challenge.challenge or similar.
Download/save this file.

Step-by-Step Offline Registration

Troubleshooting "Hot" Failures

If you tried the "hot" method and Nessus is showing "Unlicensed - Contact Support," here is why:

| Error | Solution | | :--- | :--- | | "Plugin feed not set" | You forgot to copy plugin_feed_info.inc. This file contains the Session Token. | | "Challenge code invalid" | The system clock is off by more than 300 seconds. Use ntpdate offline sync or manually set time. | | "SSL handshake failed" | Nessus is trying to call home. Block port 443 outbound via iptables or edit /etc/hosts to redirect plugins.nessus.org to 127.0.0.1. | | "License expired" | The "hot" method works best with a perpetual license. Free trials expire after 7 days regardless of offline status. | For Nessus Professional : Login at https://license