Authorized Domains and Keyless QCMM Entitlement

Current QCMM entitlement is keyless. Paid access is associated with an Authorized Domain in QuantaCade, then QCMM verifies that site and stores signed local entitlement state for normal operation. Customers do not paste a current license key into QCMM.

This design also keeps ordinary frontend page rendering nonblocking: frontend requests use the local signed entitlement snapshot and task-health state instead of making remote entitlement HTTP calls.

How Keyless Entitlement Works

  1. In the QuantaCade account, add the Joomla site’s domain to the product’s Authorized Domains area for the paid entitlement you want this site to use.
  2. In Joomla Administrator, open QCMM → Status.
  3. Use Refresh Entitlement when you need an immediate administrative recheck.
  4. QCMM creates the short-lived site-verification proof required by the Authorized-Domain service, verifies the domain, and stores the resulting signed local entitlement state.
  5. Normal frontend QCMM requests read that local state. The Entitlement Revalidation Scheduled Task performs the canonical periodic revalidation every 60 minutes.

Base Tier, Effective Tier, and Verification State

Status distinguishes the underlying Base tier from the current Effective tier. A Max Preview can temporarily change Effective tier without changing Base tier. Verification/task-health information is also part of whether premium access can safely remain active.

Why the Entitlement Task Matters

Entitlement Revalidation is a security-canonical hourly task. If QCMM detects invalid task integrity or cannot trust the premium entitlement state, access above Basic can be forced back to Basic until the entitlement is safely re-established.

Legacy License Keys

Upgraded installations can retain historical Legacy License Key data for compatibility/display/migration cleanup, but it is not the current activation mechanism. Do not instruct customers to obtain or enter a new QCMM key for 2.0.21.

Frontend Rendering Is Local-Only

  • Loading Plans, Dashboard, checkout, scheduling, or other normal frontend views does not perform the remote entitlement refresh.
  • Normal frontend rendering also does not perform entitlement migration writes.
  • Remote verification belongs to the scheduled revalidation path or an explicit authorized Administrator refresh.

Troubleshooting Paid Access

  1. Confirm the exact production domain is authorized in the QuantaCade account.
  2. Open QCMM Status and compare Base tier, Effective tier, and verification/task state.
  3. Run Refresh Entitlement once if you need an immediate recheck.
  4. Verify the Entitlement Revalidation task is enabled and scheduled at 60 minutes.
  5. If the site still falls back to Basic, resolve the domain, verification, task-integrity, or connectivity problem instead of editing QCMM feature records.

Community Discussion

Want to compare QCMM workflows or discuss how other Joomla site owners use this feature? Visit the QC Memberships & Meetings Community. For private support, account-specific entitlement or billing issues, or bug reports, use the QuantaCade support system.