Dear All
I have an issue with configuring SharePoint with RMS, Please find detail in below
I have below Environment
- SharePoint server 2010
Windows Server 2008 R2
Active Directory
AD RMS server
AD RMS DB
Things which I have done
I have configured the AD RMS as per following link
http://technet.microsoft.com/en-us/library/cc753531(v=ws.10).aspx
I have tested with ADRMS Client its working perfectly
To integrate with SharePoint 2010i have done following things
Add permissions for the SharePoint server to the AD RMS certification pipeline
( http://sharepointknowledgebase.blogspot.com/2012/09/integrating-ad-rms-and-sharepoint.html)
Log on to the AD RMS server as a local administrator
Click Start, and then click Computer
Navigate to c:\Inetpub\wwwroot\_wmcs\Certification
Right-click ServerCertification.asmx, click Properties, and then click the Security tab
Click Advanced, click Edit, select the Include inheritable permissions from this object's parent check box, and then click OK two times
Click Edit
Click Add
Click Object Types, select the Computers check box, and then click OK
Type the name of the SharePoint web front-end server, and then click OK twice.
Repeat the above three steps for other web front-end servers
Click OK to close the ServerCertification.asmx Properties sheet. By default the Read & Execute and the Read permissions are configured
Reset IIS
Then I got following Error
The required Windows Rights Management client is present but the server could not be accessed. If you are switching from one RMS server to different RMS server, be sure you have to
set up a trust relationship between two. IRM will not work until the server grants permissionAlso I found Following message in events
Event Id 5145
In Event Viewer I found following entry
Information Rights Management (IRM): There was a problem while initializing the content licensing certificate (CLC) from the local lockbox.
A CLC represents a user's right to create and publish content. The server needs a CLC in order to create IRM protected documents.
I followed as per the link ( http://technet.microsoft.com/en-us/library/cc560972(v=office.12).aspx )
I can’t find following path
%allusersprofile%\Application Data\Microsoft\DRM\Server\ folder
I found below path and delete all contains
C:\users\spfarm\appdata\local\microsoft\drm\
when we were manually connecting to the RMS /_wmcs/certification.asmx file via a browser from the SharePoint server we got an untrusted certificate result in the browser.
So we have export the certificate from IIS and import into SharePoint server and resolved the untrusted certificate
IIS Logs in AD RMS Server
I found following errors in IIS log of AD-RMS Server
10.10.10.10 POST /_wmcs/licensing/publish.asmx - 443 10.10.10.5 Windows+Rights+Management+Client 401 2 5 78
10.10.10.10 POST /_wmcs/licensing/publish.asmx - 443 Test\SPFarm 10.10.10.5 Windows+Rights+Management+Client 500 0 0 1452
When I type http://adrms-srv.com/_wcms/licensing/publish.asmx in SharePoint server page is opening
Also I change browser setting as automatic log on as current username and password so it won’t ask any credentials
Similar Issue Links
http://social.technet.microsoft.com/Forums/en-US/sharepointadminprevious/thread/c478c972-a3ad-4760-a960-dfd52c8981ea
http://social.technet.microsoft.com/Forums/en-US/sharepointadminprevious/thread/2ff5ef0e-74d2-48cd-88b1-4ef45828949a
https://groups.google.com/forum/?fromgroups=#!topic/microsoft.public.rights_mgmt_svcs/d3uEbQ74zAE
Questions
- SPfarm account is SharePoint administrator account , Is that account requires any special privileges ?
- I have read SPC, RAC, GIC , CLC certificates , Is there anything I have to configure here?
- I hope so I don’t need to install any Windows Rights Management Services Client Service Pack 2 on my WFE servers (Windows Server 2008 R2)
- Someone says it’s a PKI certificate error , If so how I should rectify (Sorry am not a system guy)
- Someone(http://social.technet.microsoft.com/Forums/en-US/sharepointadminprevious/thread/c478c972-a3ad-4760-a960-dfd52c8981ea )
says to create a trust relationship between two domains using Active Directory Federated Services, But in my case mine single domain, like anything this I have to create?
- In Regedit (Ad rms server and SharePoint server ) also I cant find the following enter HKLM\software\microsoft\MSDRM , which I seen I lots of forums
- Also I didn’t find Msdrm.dll on
SharePoint servers
Please help me to sort out this issue