Fix 0X0000085C Internal Error on Windows Activation

Quick answer

Open Command Prompt as admin, run slmgr -rearm, restart, then run slui 04 to reactivate. If that doesn't work, check your DNS is pointing to a public server like 8.8.8.8.

What this error means and why you're seeing it

I've seen 0X0000085C pop up mostly on Windows 10 and 11 machines that were originally activated with a volume license key or a KMS (Key Management Service) setup. The error text says "An internal error occurred." That's Microsoft's way of saying the Software Protection service (sppsvc) got confused. It usually happens when the system clock is off by more than a few minutes, or when the DNS server can't resolve the activation server's address. I've also seen it after a major Windows update that reset some licensing files. The core issue is the activation client can't complete a handshake with Microsoft's servers.

Don't panic. The fix is straightforward. You're going to reset the activation timer, then force a new activation attempt. If that fails, we'll look at DNS and network settings.

Step-by-step fix

Open Command Prompt as admin. Press the Windows key, type "cmd," right-click "Command Prompt," and select "Run as administrator." You'll see a User Account Control prompt — click "Yes."
Expected outcome: A black window with a blinking cursor. The title bar should say "Administrator: Command Prompt."
Reset the activation timer. Type this command and press Enter:
```
slmgr -rearm
```
Wait a few seconds. You should see a pop-up message that says "Command completed successfully. Please restart the system for the changes to take effect."
Why this works: The -rearm flag resets the activation grace period back to 30 days. It also clears any corrupted licensing state stored in the registry.
Restart your PC. Click the Start menu, select the power icon, and choose "Restart." Don't skip this step — the changes won't apply until you reboot.
After restart, open Command Prompt as admin again (same as step 1).
Launch the activation wizard. Type this command and press Enter:
```
slui 04
```
The "04" flag tells Windows to open the phone-based activation screen. You'll see a new window with a list of countries and a phone number.
Expected outcome: A window titled "Windows Activation" with a country drop-down and a large "Installation ID" box. If you see this, the activation service is working again.
Follow the phone activation prompts or close that window and use the digital activation method instead. Go to Settings > System > Activation and click "Activate" next to your edition.
Expected outcome: Windows should activate without the 0X0000085C error. If you get a different error, write it down.

Alternative fixes if the main steps don't work

Fix 1: Check your DNS settings

The activation process relies on DNS resolving activation.sls.microsoft.com. If your network uses a local DNS server (like a domain controller or a router that blocks certain queries), the request fails. Here's what to do:

Press Windows key + R, type ncpa.cpl, and press Enter.
Right-click your active network adapter (usually "Ethernet" or "Wi-Fi") and select "Properties."
Double-click "Internet Protocol Version 4 (TCP/IPv4)."
Select "Use the following DNS server addresses." Set Preferred to 8.8.8.8 and Alternate to 8.8.4.4. Click "OK" twice.
Open Command Prompt as admin and run ipconfig /flushdns then ipconfig /registerdns. Restart and try activation again.

Fix 2: Check the Software Protection service

Sometimes the service itself stops working. Hit Windows key + R, type services.msc, and press Enter. Scroll down to "Software Protection." Its status should be "Running." If it's not, right-click it and choose "Start." Set the startup type to "Automatic" by double-clicking the service, changing the dropdown, and clicking "Apply." Then restart the service by right-clicking and selecting "Restart." Try activation again.

Fix 3: Run the Microsoft Activation Troubleshooter

Microsoft has a built-in tool for this. Go to Settings > Update & Security > Troubleshoot (on Windows 10) or Settings > System > Troubleshoot (on Windows 11). Select "Additional troubleshooters," then "Activation." Run it. It can detect and fix common issues like a corrupted product key or a blocked port.

How to prevent this error going forward

The 0X0000085C error often comes back if you're on a corporate network with strict DNS or if your system date drifts. Two things I'd recommend: first, enable automatic time sync. Right-click the clock in the taskbar, select "Adjust date/time," turn on "Set time automatically." Second, if you're using a KMS activation with a volume license, make sure the KMS host is reachable on port 1688. If you're running Windows 10/11 Pro or Enterprise, you can check your activation status with slmgr -dlv in the command prompt. It'll show you the remaining grace period and the KMS server name if one's set. Keep those two things in check, and you'll rarely see this error again.