A product authorization service is described, including receiving, from a first source, an item serial number (ISN) of a product and an item-specific key (ISK) for the product; receiving, from a second source, a product-package serial number (PPSN) associated with the product and information about the second source; storing the received PSN with an authorized indication based on the information about the second source indicating an authorized source; receiving, from the product, the PSN and the ISN; determining whether the PSN is the same as the receive PSN with the authorized indication; and if the PSN is the same as the receive PSN, transmitting the ISK to the product, the ISK enables activation of one or more features of the product.