Upgrading ADRMS and Mac Support RRS feed

  • General discussion

  • We have a set of Windows 2008 R2 SP1 ADRMS servers and need to upgrade to support Mac users.  From what I have been able to find here are the steps (from this guide):

    1. In the System 32 folder, double-click regedt32.
    2. Under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DRMS, double-click ConfigStatus.
    3. In the Edit DWORD (32-bit) Value box, change the Value Data to 2, and then click OK.
    4. In Windows Explorer, browse to the RMS folder.  By default, the folder path is %systemdrive%\Windows\System 32\rms\.
    5. In the rms folder, right-click Microsoft.RightsManagementServices.UpgradeWizard,
      and then click Run as administrator.
    6. On the Active Directory Rights Management Services page, click Next.
    7. On the Provide AD RMS Service Account Password page, enter the same password that
      was used in the RMS installation.
    8. On the Provide AD RMS Private Key Password page, enter the same password that was
      used to encrypt the private key in the RMS installation.
    9. On the Confirm Installation Options page, click Install.
    10. Click Close.

    Just to be clear, is the password in step 8 the cluster key password?

    Also, I do not see the MacCertification.asmx file there now.  Does this upgrade process create that file?


    • Edited by MacGeever Monday, January 27, 2014 5:19 PM
    Monday, January 27, 2014 3:45 PM

All replies

  • AFAIK Windows Server 2008 R2 with SP1 supports Mac users. See http://technet.microsoft.com/en-us/library/jj151098%28v=ws.10%29.aspx and little outdated but helpful http://www.microsoft.com/en-us/download/details.aspx?id=20825

    Also I think in order to create protected content on Mac you'll need volume license edition of Office. You'll need Professional Plus license for creating protected content (http://office.microsoft.com/en-us/business/microsoft-office-volume-licensing-suites-comparison-FX101825637.aspx)


    Monday, January 27, 2014 4:45 PM
  • Step 8: yes this is the password you used during the cluster installation for protection of RMS private key.

    I guess MacCertification.asmx is created during the update process.


    Tuesday, January 28, 2014 7:41 AM
  • Does this change affect clients in any way?  We mostly have Windows 7 machines so very little, if any, XP to worry about.  We also have the Mac clients that will be reading the documents via Office 2011.
    Thursday, January 30, 2014 3:43 PM
  • Hi MacGeever -

    Enabling support for Macs will not affect your Windows clients.  They will continue using RMS as usual.


    Micah LaNasa

    Synergy Advisors


    Thursday, January 30, 2014 5:00 PM
  • R2 SHOULD have MacCertification.asmx there already.
    The only steps you should have to do is verify permissions:

    1. To enable server services to receive RACs, right-click the MacCertification.asmx file, and

    then click Properties.

    2. On the Security tab, and click Continue.

    3. On the Security tab, click Add.

    Verify the permitted users on the Security tab. You should see System, AD RMS Service

    Group, Administrators, and Users. If these accounts objects are missing from the Security

    tab, then go to step 4 to add them.

    4. To add the computer account object of the AD RMS-enabled server application and the

    AD RMS Service Group, click Locations.
    5. Select %servername%, and then click OK.

    6. Click Advanced.

    7. Click Find Now.

    8. Select the following groups from the search results:

    AD RMS Service Group (%servername% \AD RMS Group)

    Administrators (%servername% \Administrators)

    Users (%servername% \Users)

    9. Click OK.

    If it's not present, you can try the other steps (it can't hurt). Yes that would be the cluster key password.

    Thursday, January 30, 2014 10:37 PM
  • Well, the goofy part is we had a server die so one server is Windows 2008 R2 non SP1 and the one that replaced the dead one is Windowds 2008 R2 with SP1.  The new server has that file, the old one does not so we were going to run the upgrade on the old one.

    Is it possible all we really need is that .asmx file?  Does that upgrade do anything else significant in the background?


    • Edited by MacGeever Saturday, February 8, 2014 3:14 AM
    Friday, February 7, 2014 4:43 PM