AD RMS Configuration Error in SharePoint 2010

Trying to connect SharePoint to your AD RMS server gives you this message “The required Windows Rights Management client is present but could not be configured properly. IRM will not work until the WRM client is configured properly”.

image

Ok here I’m assuming you have already followed the steps to add all your server farms account’s permissions to the ServerCertification.asmx file on the AD RMS server. If so you are most likely missing the “AD RMS Service Group”’s permissions. This is a local group so looking inside your AD you will not find it.

The steps for configuring SharePoint Server role permissions are as follows:

On the RMS server, navigate to C:\Inetpub\wwwroot\_wmcs\Certification.

  • Right-click the ServerCertification.asmx file and choose Properties, and then click the Security tab.
  • Click Edit and then Add.
  • Click Object Types, select Computers, and then click OK.
  • Enter the name of all SharePoint web roles servers into the box and then click OK.
  • Select Object Types of Groups, and then click OK.
  • Type RMSServer\AD RMS Service Group (where RMSServer is the name of your RMSServer), and then click OK.

Review the security settings, which should be similar to what is shown in Figure 5.

Figure 5. Modifying the security on the ServerCertification.asmx file on the RMS server.

9780672333255_6-18 8.18.10

Click OK to close the security dialog box.