none
Configuration Guide for IRM (Information Rights Management) fails

    Question

  • For a couple of weeks I cannot open my IRM protected Excel files using Windows 10 (64 bit) and Office 365 (32 bit). The error is that the account certification service is unavailable (my translation from Danish):

    Other seems to have this problem too:

    https://social.technet.microsoft.com/Forums/office/en-US/b6f14ac7-6ee7-4ce8-aebf-d97213e1b542/excel-2013-irm-account-certification-service-is-not-available?forum=officeitpro

    I now has learned that the service is a Beta or Test solution - or something like that, but please provide a solution for getting the files unlocked before closing it (if that is the case).

    Now we are simply not allowed to open our protected files.

    Looking forward to getting Your advise.


    MVH gsl@systemconnect.dk Se også: http://blog.systemconnect.dk/

    Thursday, August 6, 2015 9:01 PM

Answers

All replies

  • When you have the error message, there is a link below called "Service Agreement". See section 2.2:
    http://certification.drm.microsoft.com/passcb/help/en/policy.htm

    Official statement from Microsoft dated August 5, 2015:
    http://blogs.technet.com/b/rms/archive/2015/08/05/legacy-rms-for-microsoft-account-service-end-of-life.aspx

    1) "The service will be restored to functional status as soon as possible"

    2) "this service, originally introduced with Office 2000 as a trial is reaching its end of service life. It will be decommissioned on November 28th"

    3) "You should decrypt any files you have protected with this legacy service and re-encrypt it using Azure RMS for Individuals using a business account. You can sign up for Azure RMS for individuals"


    Peter :-)


    Thursday, August 6, 2015 9:35 PM
  • Thanks for the links which confirms my suspicion.

    I now know that this is a test service, but hiding that in the Service Agreement and not warning against that every time the service is used is imho ridiculous. I'm apparently not the only one which did'nt know, but I lucky, I only have one Excel sheet protected by this. Others have several documents and some protected by people not in the organisation anymore.

    We can now predict that the net will be flooded by people complaining about loosing documents in November/December. We better start spreading the word - I'll probably write on my blog about it later today...

    As soon as the service is restores I can and will remove the protection from my Excel sheet. And I would never dream of changing to Azure RMS now that is has been proven how dependent you get on a service that might or might not run. I know that I could just implement AD RMS instead but I'll probably choose an alternative way..


    MVH gsl@systemconnect.dk Se også: http://blog.systemconnect.dk/

    Friday, August 7, 2015 8:31 AM
  • The service should be back up now. Please test and let us know.

    If it IS, you should start decrypting your documents. If you need them to remain encrypted, please use the RMS for Individuals, ADRMS, or Azure RMS to encrypt them again.

    Tuesday, August 11, 2015 8:03 PM
  • The service should be back up now. Please test and let us know.

    It worked ok again earlier today here in Denmark, Europe.

    Peter :-)

    Tuesday, August 11, 2015 8:05 PM
  • I have just read that this service is now decommissioned. I have to decrypt this file. It is urgent. How can I do this??
    Thursday, December 3, 2015 10:20 PM
  • According to Microsoft it is not possible to decrypt files after 28 Nov 2015:

    In an entry at The Official RMS Team Blog from 21 Aug 2015 they wrote:

    "If you are one of the few using this trial service, you should decrypt any files you have protected. Once the service is decommissioned, access to those files will not be possible."

    At the same blog, at page 2 in the commenting section, Enrique Saggese wrote at 11 Aug 2015:

    "But please note, once the service is decommissioned, we won't be able to decrypt any content, as the keys and devices used for the service will be destroyed."

    Found at: http://blogs.technet.com/b/rms/archive/2015/08/21/legacy-rms-for-microsoft-account-service-end-of-life.aspx

    So your only chance is to search your backup from before you encrypted the file, to see if you have an unencrypted version. Or if you have a printed copy stored in some safe place. Otherwise your data is lost.

    When using encryption on data that should not get lost, always store an unencrypted copy in an offline and safe place.


    Peter :-)


    Thursday, December 3, 2015 10:23 PM
  • Perhaps you should inform your Tech Support Team.  After spending 4 days with various Techs who knew nothing about this and suggested to me that I spend $500 to speak with an Advanced Tech person who apparently wouldn't have been able to do anything anyway, I am extremely angry. Not one of the 7 people I spoke with even mentioned that this service was discontinued.  I had to figure it out on my own.  
    Friday, December 4, 2015 2:29 AM