Logging on to Exact Online with a production licence key ends with:
```
itgenexl053
A connection to the database 'Exact Online\Exact Online (nl)' could not be established as user '…'.
The application 'Invantive Control for Excel' can only be used with your own client ID in
combination with a production license key on top-level domain 'nl'.
```
This is not a defect and the licence key is not at fault. Every application which speaks to Exact Online identifies itself with a client ID which Exact Online issues on registration. Invantive supplies its own client ID for a trial, freemium, unpaid or Public Data key. A production key does not use it: the customer registers an app of their own in the Exact Online App Centre and configures its client ID here.
The reason is attribution. Exact Online measures API traffic per app and not per company, so the load caused by one customer would otherwise be attributed to Invantive rather than to the customer whose data is being read.
## Registering the App
The app is registered in the Exact Online App Centre of the country of the subscription, which is why the message names a top-level domain. An app registered for `nl` does not serve a subscription on `be` or `uk`; a customer with subscriptions in several countries registers one app per country.
The registration yields a client ID, and optionally a client secret. The redirect URL to enter is:
```
https://clientredirect.invantive.com
```
That URL is where the authorisation of Exact Online returns to; it is the default the Invantive drivers use when no redirect URL is configured. The steps of the registration itself are Exact Online's and are described on the [forums](https://forums.invantive.com).
## Entering the Client ID
Enter the values in the log-on window under "Advanced": client ID, redirect URL, and the client secret where the registration produced one.
They can equally be set in the connection string of the data container, which is what the message text refers to:
| Parameter | Meaning |
|---|---|
| `api-client-id` | the client ID of the registered app |
| `api-redirect-url` | the redirect URL entered during registration |
| `api-client-secret` | the client secret, where the app has one |
See [[Settings]] for where the connection string lives, and [[Invantive UniversalSQL/General/Data Containers|Data Containers]] for what a connection string is.
## Related Refusals
- `itgenexl043`: the top-level domain could not be derived from the API URL, so the country of the subscription is unknown.
- `itgenexl037` and `itgenexl038`: the configured client ID is empty, or contains characters outside ASCII.
## When It Appears After an Upgrade
The message often surfaces straight after installing a new release or after replacing a trial key by a production key. Nothing about the Exact Online side changed at that moment: the new key is a production key, and a production key has always required an app of your own. The trial key which worked before was using the client ID of Invantive.