- FAIL: Failed to obtain a Trusted Publishing Domain from RMS Online. RRS feed

  • Question

  • I am trying to Run IRM in office 365 for azure online and i am getting this error 

    Import-RMSTrustedPublishingDomain -RMSOnline -name “RMS Online”
    Publishing Domain from the RMS Online service. The error was: RMS Online returned an error for
    irectory organization ID 161f3c8c-b4ce-4bb6-b520-0a4449b49f77, .
          : NotSpecified: (RMS Online - 1:String) [Import-RMSTrustedPublishingDomain], FailedToGetTr
    rorId : [Server=MAXPR01MB0459,RequestId=7d75bb47-67d5-45bb-8265-483f62907ae1,TimeStamp=7/7/2016
    reCategory=Cmdlet-FailedToGetTrustedPublishingDomainFromRmsOnlineException] 87B77B4,Microsoft.E
          : ps.outlook.com

    please let me know what can be done 

    results are for the test is like this 

    PS C:\Users\kapooabh> Test-IRMConfiguration -RMSOnline

    Results : Checking organization context ...
                  - PASS: Organization context checked; running as tenant administrator.
              Loading IRM configuration ...
                  - PASS: IRM configuration loaded successfully.
              Checking RMS Online tenant prerequisites ...
                  - PASS: RMS Online tenant prerequisites passed.
              Checking RMS Online authentication certificate ...
                  - PASS: The RMS Online authentication certificate is valid.
              Checking that a Trusted Publishing Domain can be obtained from RMS Online ...
                  - FAIL: Failed to obtain a Trusted Publishing Domain from RMS Online.
              RMS Online error code: TenantIdNotFound
              Microsoft.Exchange.Management.RightsManagement.RmsOnlineImportTpdException: RMS Online returned an error for
              tenant with external directory organization ID 161f3c8c-b4ce-4bb6-b520-0a4449b49f77
                 at Microsoft.Exchange.Management.RightsManagement.RmsUtil.ThrowIfErrorInfoObjectReturned(TenantInfo
              tenantInfo, Guid externalDirectoryOrgId)
                 at Microsoft.Exchange.Management.RightsManagement.RmsOnlineTpdImporter.Import(Guid externalDirectoryOrgId)
                 at Microsoft.Exchange.Management.RightsManagement.RMSOnlineValidator.ValidateTPDCanBeObtainedFromRMSOnline
              (RmsOnlineTpdImporter tpdImporter, TrustedDocDomain& tpd)

              OVERALL RESULT: FAIL

    Regards Abhay

    • Moved by Swikruti Bose Friday, July 8, 2016 12:09 PM Related to RMS
    Friday, July 8, 2016 4:47 AM

All replies

  • Hi,

    It seems like you don't have the RMS service enabled in the cloud, can you check it?

    You can check it in the azure portal (old portal) --> Active Directory --> Rights Management ( In the status section, should appear as Active.


    Sunday, July 10, 2016 10:47 AM
  • Hi Victor,

    what if RMS service is enabled in the cloud??

    I am global admin on AD but in Azure Settings under Administrator my subscription shows Service Admin.

    I don't know if above has anything to do with the error.


    Wednesday, July 20, 2016 7:52 AM
  • Make sure you have the Azure RMS Powershell Admin tools installed (can be on any machine)


    and run:



    (if it shows it's not enabled run the following)


    Tuesday, July 26, 2016 12:24 AM
  • Hi,

    Step1 - check your's Tenant location (Europe, North America etc.):

    PS> Get-OrganizationalUnit #focus on the OriginatingServer parameter

    Step2 - get IRM configuration:

    PS> Get-IRMConfiguration #focus on the RMSOnlineKeySharingLocation parameter

    Step3 - compare IRM settings with Tenant location, then set IRM configuration - you can find help in the article https://docs.microsoft.com/en-us/rights-management/deploy-use/configure-office365 - perform Steps 1 - 4 from this site. E.g. for Europe:

    PS> Set-IRMConfiguration -RMSOnlineKeySharingLocation "https://sp-rms.eu.aadrm.com/TenantManagement/ServicePartner.svc"

    Step4 - run IRM Test:

    PS> Test-IRMConfiguration -RMSOnline

    Wednesday, August 31, 2016 7:36 AM