Quantcast
Channel: SharePoint 2010 - Setup, Upgrade, Administration and Operations forum
Viewing all articles
Browse latest Browse all 13778

Issue in Using RMS in SharePoint 2010

$
0
0

Dear All

 

I have an issue with configuring SharePoint with RMS, Please find detail in below

I have below Environment

  1. SharePoint server 2010
    Windows Server 2008 R2
    Active Directory
    AD RMS server
    AD RMS DB

Things which I have done

 

I have configured the AD RMS as per following link

http://technet.microsoft.com/en-us/library/cc753531(v=ws.10).aspx

I have tested with ADRMS Client its working perfectly

 

To integrate with SharePoint 2010i have done following things

 

Add permissions for the SharePoint server to the AD RMS certification pipeline

( http://sharepointknowledgebase.blogspot.com/2012/09/integrating-ad-rms-and-sharepoint.html)

Log on to the AD RMS server as a local administrator
Click Start, and then click Computer
Navigate to c:\Inetpub\wwwroot\_wmcs\Certification
Right-click ServerCertification.asmx, click Properties, and then click the Security tab
Click Advanced, click Edit, select the Include inheritable permissions from this object's parent check box, and then click OK two times
Click Edit
Click Add
Click Object Types, select the Computers check box, and then click OK
Type the name of the SharePoint web front-end server, and then click OK twice.
Repeat the above three steps for other web front-end servers
Click OK to close the ServerCertification.asmx Properties sheet. By default the Read & Execute and the Read permissions are configured
Reset IIS

Then I got following Error

The required Windows Rights Management client is present but the server could not be accessed. If you are switching from one RMS server to different RMS server, be sure you have to set up a trust relationship between two. IRM will not work until the server grants permissionAlso I found  Following message in events

Event Id 5145

In Event Viewer I found following entry

 

Information Rights Management (IRM): There was a problem while initializing the content licensing certificate (CLC) from the local lockbox.

A CLC represents a user's right to create and publish content. The server needs a CLC in order to create IRM protected documents.

 

I followed as per the link http://technet.microsoft.com/en-us/library/cc560972(v=office.12).aspx )

I can’t find following path

 

%allusersprofile%\Application Data\Microsoft\DRM\Server\ folder

 

I found below path and delete all contains

C:\users\spfarm\appdata\local\microsoft\drm\

 

when we were manually connecting to the RMS /_wmcs/certification.asmx file via a browser from the SharePoint server we got an untrusted certificate result in the browser.

 

So we have export the certificate from IIS and import into SharePoint server and resolved the untrusted certificate

 

IIS Logs in AD RMS Server

I found following errors in IIS log of AD-RMS Server

10.10.10.10 POST /_wmcs/licensing/publish.asmx - 443 10.10.10.5 Windows+Rights+Management+Client 401 2 5 78

10.10.10.10 POST /_wmcs/licensing/publish.asmx - 443 Test\SPFarm 10.10.10.5 Windows+Rights+Management+Client 500 0 0 1452

 

When I type http://adrms-srv.com/_wcms/licensing/publish.asmx in SharePoint server page is opening

Also I change browser setting as automatic log on as current username and password so it won’t ask any credentials  

Similar Issue Links

http://social.technet.microsoft.com/Forums/en-US/sharepointadminprevious/thread/c478c972-a3ad-4760-a960-dfd52c8981ea

http://social.technet.microsoft.com/Forums/en-US/sharepointadminprevious/thread/2ff5ef0e-74d2-48cd-88b1-4ef45828949a

https://groups.google.com/forum/?fromgroups=#!topic/microsoft.public.rights_mgmt_svcs/d3uEbQ74zAE

 

Questions

  • SPfarm account is SharePoint administrator account , Is that account requires any special privileges ?
  • I have read SPC, RAC, GIC , CLC certificates , Is there anything I have to configure here?
    • I hope so I don’t need to install any  Windows Rights Management Services Client Service Pack 2 on my WFE servers (Windows Server 2008 R2)
    • Someone says it’s a PKI certificate error , If so how I should rectify (Sorry am not a system guy)
    • Someone(http://social.technet.microsoft.com/Forums/en-US/sharepointadminprevious/thread/c478c972-a3ad-4760-a960-dfd52c8981ea ) says to create a trust relationship between two domains using Active Directory Federated Services, But in my case mine single domain, like anything this I have to create?
    • In Regedit (Ad rms server and SharePoint server ) also I cant find the following enter HKLM\software\microsoft\MSDRM , which I seen I lots of forums
    • Also I didn’t find  Msdrm.dll on SharePoint servers 
Please help me to sort out this issue


Viewing all articles
Browse latest Browse all 13778

Latest Images

Trending Articles



Latest Images

<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>