Answered by:
RMS Sharing App configuration fails

Question
-
Hi,
I have a question regarding Office 2010 and Windows Azure RMS which I hope someone could help with.
We have subscribed to Azure RMS, and we now need to install the RMS Sharing App for use to protect documents. Following the admin guide from http://technet.microsoft.com/en-US/library/dn339003.aspx the installation of the client was successful, but the configuration step has an issue. The users have separate online accounts for the Azure RMS, which is separate from their AD logon credentials.
When running the following command under the user context (Admin guide says no elevated rights needed for this):
bin\RMSSetup.exe /configureO2010Only
the aadrmprep_silent.log gives:
Configuring your computer for AADRM...
Activating the machine...
Running the rmactivate.exe...
rmactivate.exe returned 0x0
Getting service location...
Certification Url: https://f0c495e6-9375-477d-b2d0-bfdef7b19b6b.rms.eu.aadrm.com/_wmcs/certification
Licensing Url: https://f0c495e6-9375-477d-b2d0-bfdef7b19b6b.rms.eu.aadrm.com/_wmcs/licensing
Default Service: Yes
Getting a RAC from https://f0c495e6-9375-477d-b2d0-bfdef7b19b6b.rms.eu.aadrm.com/_wmcs/certification...
Getting RAC silently failed. Trying non-silently...
Tool failed:
Failed with error code: 0x8004cf43
After trying to run the configuration with elevated rights (although not needed, I thought it is worth trying) the aadrmprep_silent.log gives:
Configuring your computer for AADRM...
The machine is already activated.
Getting service location...
Certification Url: https://f0c495e6-9375-477d-b2d0-bfdef7b19b6b.rms.eu.aadrm.com/_wmcs/certification
Licensing Url: https://f0c495e6-9375-477d-b2d0-bfdef7b19b6b.rms.eu.aadrm.com/_wmcs/licensing
Default Service: Yes
Getting a RAC from https://f0c495e6-9375-477d-b2d0-bfdef7b19b6b.rms.eu.aadrm.com/_wmcs/certification...
MSDRM Callback status = DRM_MSG_ACTIVATE_GROUPIDENTITY
MSDRM Callback hr = S_DRM_CONNECTING
Getting RAC silently failed. Trying non-silently...
MSDRM Callback status = DRM_MSG_ACTIVATE_GROUPIDENTITY
MSDRM Callback hr = S_DRM_CONNECTING
Tool failed:
Failed with error code: 0x8004cf43
I tried to access the certification URL from the web browser and I get the below error.
Has anyone come across this issue before and know what the problem is?
Thanks.
Regards,
Thanh
Wednesday, April 16, 2014 6:58 AM
Answers
-
Hi Andrzej,
Thank you for your response. Yes, I did run the installation command as you pointed out. This was one of the steps in the Admin Guide.
I have resolved the issue, and it was to do with the fact that the IE setting of “Enable Integrated Windows Authentication” needed to be enabled. This is so that the user can be authenticated via SSPI. Once this was enabled, the configuration completed successfully.
Hope this helps someone else who might have this issue.
- Edited by Thanh Trinh Friday, May 23, 2014 5:19 PM
- Marked as answer by Thanh Trinh Friday, May 23, 2014 5:19 PM
Friday, May 23, 2014 5:18 PM
All replies
-
As you said, you want to use Azure RMS, not AD RMS, correct? So, did you run the below command prior to yours?
setup.exe /s /configureO2010Admin /certificationUrl <certification_url>
It is described here: http://technet.microsoft.com/en-US/library/dn339003.aspx#BKMK_verifyscripted under "To deploy the RMS sharing application for Office 2010 and Azure RMS" section.
Did my post help you or make you laugh? Don't forget to click the Helpful vote :) If I answered your question please mark my post as an Answer.
Monday, April 28, 2014 12:37 PM -
Hi Andrzej,
Thank you for your response. Yes, I did run the installation command as you pointed out. This was one of the steps in the Admin Guide.
I have resolved the issue, and it was to do with the fact that the IE setting of “Enable Integrated Windows Authentication” needed to be enabled. This is so that the user can be authenticated via SSPI. Once this was enabled, the configuration completed successfully.
Hope this helps someone else who might have this issue.
- Edited by Thanh Trinh Friday, May 23, 2014 5:19 PM
- Marked as answer by Thanh Trinh Friday, May 23, 2014 5:19 PM
Friday, May 23, 2014 5:18 PM