The following steps detail enabling AD RMS debug tracing on the RMS server. Please test and backup any files before making changes. Hopefully we'll get some content out there to help parse through the results this logging generates. However turning it on and figuring it out is a good start.

My preferred method is I copy the web.config file and paste it (twice). I then rename the pasted files to "web - Original.config" and "web - Debug.config." I edit the "debug" config file and save my changes there. When I need to troubleshoot I delete the existing web.config (because I have a backup of it in "original"). I then copy/paste the debug file and rename the copy to web.config. Do the iisreset and off I go. To revert back I repeat the steps using the original config file.

Note:

• There are several web.config files in the AD RMS website. Only enable the tracing on the files needed. If the issue concerns a client getting a license then only the licensing web.config file need be edited.
• After troubleshooting remove the logging from the web.config files. Remember to do an IISreset after resetting the files.

1. Make a copy of the web.config files that may exist in the Certification and Licensing directories under C:\IntetPub\WWWRoot\_wmcs:
    - C:\inetpub\wwwroot\_wmcs\admin\web.config
    - C:\inetpub\wwwroot\_wmcs\certification\web.config
    - C:\inetpub\wwwroot\_wmcs\certificationexternal\web.config
    - C:\inetpub\wwwroot\_wmcs\decommission\web.config
    - C:\inetpub\wwwroot\_wmcs\groupexpansion\web.config
    - C:\inetpub\wwwroot\_wmcs\licensing\web.config
    - C:\inetpub\wwwroot\_wmcs\licensingexternal\web.config
    - C:\inetpub\wwwroot\_wmcs\licensingrsa\web.config
   
   (Screenshot of the certification path - using my method described above)
      
   
   
   
2. Add the following lines right after the closing </DRMS> tag section that is in the desired web.config file(s). Notepad or any text editor may be used. Yes, it says TMS. That is not a typo.
   
   <system.diagnostics>

     <switches>

       <add name="TMS Trace" value="4" />

     </switches>

   </system.diagnostics>
   
   (Sceenshot of where to put the text)
      
   (Screenshot of the edited file)
   
3. Perform an IISreset.
4. Download DebugView and save to the desktop on the AD RMS server (http://live.sysinternals.com/tools/dbgview.exe).
5. Start DebugView (run as administrator).
6. Under Capture select Capture Global Win32.
   
7. Reproduce the issue and stop capturing data.
   (Screenshot of the capture on/off icon - it is off in the image)
   

The output gathered appears as below. It is text and may be saved and viewed in a text editor.