Fix Kaspersky 'License expired' error (protection blocked)

You paid. The renewal email says you're good until next year. And yet Kaspersky is sitting in the tray with a big red banner, protection disabled, telling you the license expired. I've seen this on everything from KIS 21.3 on Windows 10 to the newer Kaspersky Standard builds on Windows 11 23H2, and 9 times out of 10 it's a sync problem, not a licensing problem. The app has a cached token that didn't update when the activation server cut over. Don't buy anything. Don't call support yet. Work through these in order and stop when the banner clears.

Step 1: The 30-second fix — force a license resync

Kaspersky caches your license locally. When renewal happens on Kaspersky's side, the local copy doesn't always refresh on its own. You can force it.

Right-click the Kaspersky icon in the system tray.
Click Pause protection — yes, actually pause it. Weird, but it works.
Wait 3 seconds, then click Resume protection.
Open the main Kaspersky window. If you still see the expired banner, hit Licensing in the bottom-left corner.
Click the Refresh icon (circular arrow) next to your license entry.

That refresh sends a request to Kaspersky's activation servers and pulls the current status. On a working connection it takes about two seconds. If the banner disappears, you're done. Close the window and go do something useful.

I've seen this exact sequence fix a renewed KIS 21.3 install on a Lenovo ThinkPad T14 that had been showing 'expired' for three days after the customer renewed. The user had rebooted twice. Nobody told them to hit Refresh.

Step 2: If the refresh button does nothing — check the obvious stuff

Still expired? Now we're looking at why the refresh didn't take. Most of the time it's one of these:

System clock is wrong. Kaspersky validates the license against the local system time. If your clock is off by more than a few hours — common after a CMOS battery dies or a VM snapshot gets restored — the license check fails. Right-click the clock, Adjust date/time, and turn on Set time automatically and Set time zone automatically. Reboot.
You're signed into the wrong Kaspersky account. If you have a My Kaspersky subscription, the app has to be signed into the same account that holds the license. Open Licensing and check the email shown. The number of people who have a work account and a personal account and don't realize it is higher than you'd think.
Activation server is being blocked. Corporate firewall, Pi-hole, NextDNS, pfSense with strict rules — any of these can block the hostname Kaspersky needs. The activation endpoints resolve under *.kaspersky.com. If you're on a locked-down network, tether to your phone for 60 seconds and hit Refresh again. If it activates on cellular, you know it's a network block.
You entered a key for the wrong product. A Kaspersky Total Security key doesn't activate Kaspersky Plus cleanly. It'll sometimes show 'expired' rather than 'wrong product'. Check the product name in your My Kaspersky portal against the app name in About.

Quick test for the clock issue — open an admin Command Prompt and run:

w32tm /resync
w32tm /query /status

If Source shows Local CMOS Clock, your machine isn't syncing to a time server at all. Fix that before you do anything else.

Step 3: The 5-minute fix — clear the license cache

Kaspersky stores the license blob in a couple of places, and sometimes that blob is just corrupt. This is the fix I reach for when the refresh button keeps spinning or throws an error like KL1X or Activation server unavailable.

Back up first. Then:

Close Kaspersky completely — right-click the tray icon, Exit.
Stop the two services: avp and klnagent. From an admin Command Prompt:
```
net stop avp
net stop klnagent
```
Navigate to C:\ProgramData\Kaspersky Lab\AVP21.3\ (the version folder matches your install — could be AVP21.3, AVP21.14, etc.).
Rename the Licenses folder to Licenses.old. Don't delete it — rename it, in case you need to roll back.
Restart the services:
```
net start avp
net start klnagent
```
Open Kaspersky. It'll prompt you to activate. Sign into your My Kaspersky account or paste your activation code.

The app rebuilds the license folder from the activation server. This has fixed the 'expired' banner for me on retail installs, SMB deployments pushed via Kaspersky Security Center, and one very stubborn machine that had been cloned from a disk image with the previous owner's license baked in. That last one was fun — the cloned machine literally had someone else's license token in it.

Step 4: The 15-minute fix — clean reinstall

If clearing the folder didn't do it, the install itself is sick. Don't just uninstall from Programs and Features — that leaves registry keys and driver filters behind, and the new install will inherit the same problem. Use Kaspersky's removal tool.

Download kavremover.exe from Kaspersky's support site (search "kavremover"). It's the only removal tool that actually rips out the filter drivers cleanly.
Boot into Safe Mode. This matters — the self-defense module in the regular session will fight the removal.
Run kavremover.exe as admin. It should detect your Kaspersky install and offer to remove it. Enter the captcha, hit Remove, and let it finish. Reboot.
Grab a fresh installer from kaspersky.com/downloads. Don't reuse the old installer file you saved in Downloads two years ago — Kaspersky rotates builds and the old one may point at a decommissioned activation endpoint. This is a real cause of 'activation server unavailable' during install.
Install, sign in with your My Kaspersky account, and let it pull the subscription down automatically. Don't paste the activation code manually unless the account sync fails — the account route is more reliable when your renewal is stored on the portal.

After reinstall, run a full scan once. Not because you have malware — because activation failures sometimes coincide with something having tampered with the Kaspersky install, and you want to know either way.

Things that don't actually help

Rebooting repeatedly. A reboot doesn't trigger a license refresh. You're just watching the spinner.
Re-entering the same activation code over and over. If the code is for a product that's been superseded (KIS → Kaspersky Standard), it'll keep failing. Check the migration path in your My Kaspersky portal first.
Disabling self-defense to install a 'keygen'. If you're at this point, you don't have a licensing problem — you have a piracy problem, and the 'keygen' is the malware. Every single time.
Uninstalling from Control Panel and reinstalling. Leftover drivers, leftover registry keys, same expired banner. Use kavremover.exe or don't bother.

When it's actually Kaspersky's fault

Rare, but it happens. If the activation servers are down or a regional billing system is having a bad day, refresh will fail across multiple machines, not just yours. Check status.kaspersky.com before you burn an hour on a reinstall. True server-side outages usually clear within a few hours — the app will self-heal on the next refresh cycle once the backend is back, no user action needed.

If you've been through steps 1 through 4 and you're still staring at 'License expired' with a paid, active subscription, that's when you contact Kaspersky support with your activation code and the exact error string. Include KL1X, KL2X, or whatever code appears next to the banner. Saves a round trip.