31

This question already has an answer here:

I am struggling right now with using ubuntu and would like some help.

So right now i'm running ubuntu from a USB flash drive after Windows 7 somehow left.

How can I get my windows product key which is somewhere on my laptop hard drive, from within Ubuntu?

marked as duplicate by mikewhatever, Eliah Kagan, Eric Carvalho, Zanna, Kevin Bowen Sep 6 '17 at 21:21

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.

  • 2
    Retrieving a Windows key has nothing to do with Ubuntu. You may ask at superuser.com – user692175 Sep 5 '17 at 20:39
  • 8
    try sudo cat /sys/firmware/acpi/tables/MSDM – Charles Green Sep 5 '17 at 20:49
  • 2
    I edited your question down alot, as it has been confirmed the below answer works. As this is a quite common issue and not many people seem to know a solution, I edited to make it as clear as possable, so as many people can find it as possable and get help. – Mark Kirby Sep 5 '17 at 21:10
  • 1
    In my opinion it would be best to consider this on-topic. That's not established policy--I don't think we have one for this--just my view. This is basically the same as Retrieve Windows 8 Product Key from mainboard The answers--reading firmware storage vs. the Windows registry--are different but the general problem is the same. I suggest we close one as a duplicate of the other and maybe ask a mod to merge answers. – Eliah Kagan Sep 6 '17 at 2:25
  • 2
    @MichaelBay but retrieving a windows key from ubuntu is ;) – Rinzwind Sep 6 '17 at 6:51
37

First recover your Ubuntu with going to recovery mode and running

sudo apt install --reinstall ubuntu-desktop

This answer is not written by me but by Thomas on Superuser, please vote there, if you vote here thanks

There is a great tool available for Linux called chntpw. You can get it easily on Debian/Ubuntu via:

sudo apt install chntpw

To look into the relevant registry file mount the Windows disk and open it like so:

chntpw -e /path/to/windisk/Windows/System32/config/software

Now to get the decoded DigitalProductId enter this command:

dpi \Microsoft\Windows NT\CurrentVersion\DigitalProductId

A comment from below says

The path to the relevant registry file is /path/to/windisk/Windows/System32/config/RegBack/SOFTWARE

  • 5
    Pretty cool! Just tested this on my home system and the Comment from below was correct for my home system. That one is running Windows 10. I like this! +1 – Terrance Sep 5 '17 at 21:01
  • 4
    It's important to check the case of the folder and file names. On my Windows 10 computer, the file didn't exist; I had to use uppercase SOFTWARE for the file name. – Paddy Landau Sep 6 '17 at 8:25
  • 1
    Wow. This is a brilliant feature of chntpw. – dhaupin Nov 5 '17 at 0:39
  • Sadly, I get File is too small; got 0 bytes while expecting 72 or more on a windows 10 disk. – amenthes May 5 '18 at 17:03
  • 1
    Worked on Windows 7 partition, ubuntu 18.04. Would not work on read only mount. Had to remount rw. Capitalization in path was different chntpw -e /media/sdb1/WINDOWS/system32/config/software – rickfoosusa Jul 5 '18 at 15:13
5

So for anyone wondering how this actually works.

Essentially you'll have to grab the contents of the registry key

HKLM\Software\Microsoft\Windows NT\CurrentVersion\DigitalProductId

This is a so called REG_BINARY. Meaning it's just a collection of bytes. You could dump them via chntpw or copy them by hand.

Let's see what we have to do with those bytes in order to get our product key with the help of some pseudo code.

Once you have those in an Array, you need to extract the subset of bytes that encode the product id. In particular: the range between 52 and (52 + 14). That gives you 15 bytes.

EncodedId = DigitalProductId.Range(52, 52+14)

This is still a bunch of bytes, that don't at all resemble the product key. So let us decode it.

For that you need the collection of all the characters a product key can be made of:

Characters = "BCDFGHJKMPQRTVWXY2346789"

Yes this is not the whole alphabet. As it turns out a Windows product key doesn't use all of the alphanumerical symbols.

Now let's do the decoding. We'll need:

  • A variable to hold the product key
  • A loop over 0 to 24. For each character of our product key
  • An inner loop over 0 to 14 (In reverse) For each byte in our encoded id
  • Some bit fiddeling and arithmatic for the decoding process

ProductKey = ""
FOR i = 0 TO 24
    c = 0

    FOR j = 14 TO 0 STEP -1
        # Shift the current contents of c to the left by 1 byte 
        #  and xor it with the next byte of our id
        c = (c * 256) XOR EncodedId[j]

        # Put the result of the divison back into the array
        EncodedId[j] = FLOOR(c / 24)

        # Calculate remainder of c
        c = c MOD 24
    LOOP
    # Take character at position c and prepend it to the ProductKey
    ProductKey = Characters[c] + ProductKey
LOOP

Finally we insert the "-" character into the string at the appropriate places.

FOR i = 4 TO 1 STEP -1
    ProductKey = ProductKey.Insert(i * 5, "-")
LOOP

And we're done!

... Almost:

PRINT(ProductKey)

Now!


Capabilities of our pseudo code

  • $array.Range($from, $to) Get the contents of $array from $from to $to
  • $array.Insert($where, $what) Insert $what at $where
  • FOR $var = $start TO $stop [STEP $step] loop the variable $var from $start to $stop applying $step on each iteration
  • $a XOR $b Calculate bit-wise exclusive or on the numbers $a and $b
  • $a MOD $b Calculate remainder of the division of $a and $b
  • $array[$i] Take only the element at position $i from the array
  • #bla bla Is a comment and will be ignored
  • Strings are just char arrays.

You can see 3 actual implementations in C#, PowerShell and Python over at Super User

Not the answer you're looking for? Browse other questions tagged or ask your own question.