locked
Test-IRMconfiguration fails with "Invalid License" exception RRS feed

  • Question

  • Hi

    After decommissioning  test AD RMS server which was working properly with Exchange 2010, the new AD RMS server was

    installed.  All AD RMS prerequisites are completed, but testing IRM Configuration on Exchange fails with the following error:

    Acquiring Rights Account Certificate (RAC) and Client Licensor Certificate (CLC) ...
        - FAIL: Failed to acquire a Rights Account Certificate (RAC) and/or a Client Licensor Certificate (CLC).
    This failure may cause features such as Transport Decryption, Transport Protection Rules, Journal Report Decryption, IRM in Outlook Web App, IRM in Exchange ActiveSync, and IRM Search to not work. Make sure that the Exchange Servers Group is granted "Read" and "Read & Execute" rights on the ServerCertification.asmx and Publish.asmx pipelines on your AD RMS server. For details, see "Set Permissions on the AD RMS Certification Pipelin
    e" at  http://go.microsoft.com/fwlink/?LinkId=186951.
    ----------------------------------------
    Microsoft.Exchange.Security.RightsManagement.RightsManagementException: InvalidLicense
       at Microsoft.Exchange.Data.Storage.RightsManagement.RmsClientManager.EndAcquireInternalOrganizationRACAndC
    LC(IAsyncResult asyncResult)
       at Microsoft.Exchange.Management.RightsManagement.IRMConfigurationValidator.TryGetRacAndClc()
    ----------------------------------------

    OVERALL RESULT: FAIL 

    Any ideas how to fix this?

    Thanks in advance!

    Tuesday, March 26, 2013 9:48 PM

Answers

  • Found the solution:

    On Exchange server do the following. These steps need to be followed in this order.

    1. Turn off IRM 

    "Set-IRMConfiguration -InternalLicensingEnabled $false"

    2. Backup and delete the directories in "C:\ProgramData\Microsoft\DRM\Server. 
    Note: The Server folder is a hidden system folder and you will need to uncheck the "Hide protected operating system files" to view the folder.
    3. Reboot. 4. Enable IRM. 

    "Set-IRMConfiguration -InternalLicensingEnabled $true"

    5. Test IRM.

    "Test-IRMConfiguration -sender [.......]"

    • Marked as answer by SergueiR Wednesday, March 27, 2013 5:58 AM
    Wednesday, March 27, 2013 5:58 AM