Configure Active Directory Rights Management Service (AD RMS)


Before you configure AD RMS, you need to:
Install AD RMS
  1. Click Start-> Administrative Tools->Server Manager-> Roles Summary-> Add Roles
  2. Click Next on the first page of the Add Roles Wizard that appears.
  3. Select Active Directory Rights Management Services option on the Select Server Roles page, as shown in Figure 4-29.
    Figure 4-29
  4. Click Next. The role services page appears.
  5. Ensure that Web Server (IIS), Windows Process Activation Service (WPAS), and Message Queuing options are selected and then click Add Required Role Services.
  6. Click Next. the AD RMS introduction page appears
  7. Verify that the Active Directory Rights Management Server is selected on the Select Role Services page and click Next.
  8. Select Create a new AD RMS cluster option and click Next on the Create or join an AD RMS Cluster page that appears, as shown in Figure 4-30.
    Figure 4-30
  9. Select the Use a different database server option and then browse the name of the computer that is hosting AD RMS databases and then click Next.
  10. Click Select to locate the database server and type the name of the database server, click Check names and then click OK.
  11. Choose the appropriate database instance from the Database Instance dropdown, click Validate and then click Next.
  12. Click Specify and then type the domain user account and password that should be used as the AD RMS service account on the Specify Service Account page that appears, as shown in Figure 4-31.
  13. Click OK, and then click Next.
    Figure 4-31

    The Configure AD RMS Cluster Key Storage page appears.

  14. Ensure that the Use AD RMS centrally managed key storage option is selected, and then click Next. The Specify AD RMS Cluster Key Password page appears.
  15. Type a strong password in the Password field, rewrite the password again in the Confirm password field, and then click Next. The Select AD RMS Cluster Web Site page appears.
  16. Select Default Web Site or select the web site where the AD RMS Web services will be installed and then click Next. The Specify Cluster Address page appears.
  17. Select the Use an SSL-encrypted connection (https://) option.
  18. Type the FQDN name of the AD RMS cluster in the InternalAddress field, and then click Validate. If validation succeeds, the Next button becomes active.
  19. Click Next. The Choose a Server Authentication Certificate for SSL Encryption page appears.
  20. Select the Choose an existing certificate for SSL encryption (Recommended) option, select the appropriate certificate or click Import to import the certificate, and then click Next. The Server Licensor Certificate page appears.
  21. Provide a name that helps you identify the AD RMS cluster in the Friendly name field, and then click Next. The Register AD RMS Service Connection Point page appears.
  22. Ensure that the Register the AD RMS service connection point now option is selected, and then click Next. This action will register the AD RMS service connection point (SCP) in AD DS. The Introduction to Web Server (IIS) page appears.
  23. Click Next. The Select Role Services page appears.
  24. Accept the defaults and click Next. The Confirm Installation Selection page appears.
  25. Review your choices and then click Install.
  26. Click Finish when the installation completes.
  27. Log off from the server, and then log back again. Update the permissions granted to the logged on user account.This user account will automatically become a member of the AD RMS Enterprise Administrators group.