Choosing a licence mode
Start with Hybrid unless the environment or commercial rule gives you a clear reason not to.
| Requirement | Offline | Online | Hybrid |
|---|---|---|---|
| Application can never contact DYCRYPT | Choose this | No | No |
| Application must keep working through short outages | Yes | Only inside its signed window | Choose this |
| Revocation must arrive on the next check | No | Choose this | Yes, on its check schedule |
| First use should claim the machine | No; pre-bind before issue | Yes | Yes with online activation |
| Licence must be issued before installation | Yes | No | Optional with offline activation |
| Operator needs current installation visibility | No | Yes | Yes |
| Customer can send a fingerprint during setup | Required | Not required | Required only for offline activation |
Choose Offline
Section titled “Choose Offline”Use Offline when the application will never have an outbound route. You collect a hashed fingerprint before issue and deliver a signed, pre-bound licence.
The application verifies locally for the complete signed term. You cannot deliver revocation or see check-in activity after delivery.
Choose Online
Section titled “Choose Online”Use Online when central status and immediate revocation matter more than outage tolerance. The first successful signed check claims the machine.
The application still verifies each answer with the product public key. A network response is not trusted merely because it arrived over TLS.
Choose Hybrid
Section titled “Choose Hybrid”Use Hybrid for most desktop and server applications. It verifies locally on every start and confirms status online on the signed schedule.
A temporary outage leaves the application working inside the signed offline window. When that window closes, the SDK returns STALE and the application asks the user to reconnect.
Decide the failure experience too
Section titled “Decide the failure experience too”Choosing a mode is not enough. Define what the application shows for every status:
ACTIVE: continue normally;GRACE: continue with a renewal warning;PENDING: show the signed start date;STALE: ask the user to reconnect;EXPIRED: direct the user to renew;REVOKED: stop licensed functionality;INVALIDorUNKNOWN: reject the licence and preserve diagnostic detail.
Test network loss, a copied licence, hardware replacement, clock boundaries, and a fake issuer before production.