Offline registration for Tenable Nessus is essential for air-gapped environments or secure networks without direct internet access. The process involves generating a unique hardware-based challenge code from the offline machine, using it to fetch a license file
on an online machine, and then manually importing that license back to the offline scanner. Offline Registration Process 1. Generate the Challenge Code (Offline Machine) nessus offline registration hot
You must first obtain a unique "challenge code" from the machine where Nessus is installed. # /opt/nessus/sbin/nessuscli fetch --challenge : From a command prompt, run Offline registration for Tenable Nessus is essential for
C:\Program Files\Tenable\Nessus\nessuscli.exe fetch --challenge : During initial installation, select Register Offline to see the challenge code displayed on the setup screen. 2. Obtain the License (Online Machine) Open a command prompt or terminal as an Administrator/Root
Use a computer with internet access to download the required license file. Install Tenable Nessus Offline
On the computer where Nessus is installed (the offline machine):
C:\Program Files\Tenable\Nessus/opt/nessus/sbin/nessus-fetch --challenge
With ransomware attacks targeting supply chains, many operational technology (OT) environments are being physically disconnected from the internet. Nessus is often the only tool allowed inside these perimeters. When a license expires or a new sensor needs deployment, admins cannot simply click "Update Online." They need a flawless offline workflow.